EUVD-2025-114484

Malicious code in development-mui-avior-halley npm...

EUVD-2025-114477

Malicious code in development-server-electron-builder-hermes npm...

EUVD-2025-114474

Malicious code in development-taurus-slidev-deneb npm...

EUVD-2025-114472

Malicious code in development-ursa-upgrade-kaus npm...

EUVD-2025-114116

Malicious code in eleventy-development-tailwindcss-aether npm...

EUVD-2025-115615

Malicious code in castor-procyon-nova-development npm...

EUVD-2025-115341

Malicious code in chromedriver-development-meissa-telesto npm...

EUVD-2025-116249

Malicious code in babel-development-jabbah-lacerta npm...

EUVD-2025-120789

Malicious code in version-mdx-development-delphinus npm...

EUVD-2025-122909

Malicious code in radiant-development-eslint-plugin-nodejs npm...

EUVD-2025-114482

Malicious code in development-polaris-lint-staged-procyon npm...

Malicious code in relay-relay-development-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4454d28b4417cf1585f11385fdf6849980ca26868ff80b8c93180b4c03d586ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114481

Malicious code in development-query-pm2-uglify-js npm...

EUVD-2025-114494

Malicious code in development-changelog-publish-await npm...

EUVD-2025-114361

Malicious code in dotenv-safe-development-command-non-blocking npm...

EUVD-2025-111395

Malicious code in markdownlint-antares-development-nuxtjs npm...

EUVD-2025-112495

Malicious code in init-development-barnard-telesto npm...

EUVD-2025-112143

Malicious code in json-development-publish-terser-webpack-plugin npm...

EUVD-2025-111972

Malicious code in kaus-elara-relay-development npm...

Malicious code in development-heka-fetch-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc34f1ad0167ae7f5840b129cbff77369019cb49cf1497dfc4cd4c540ecfb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...