EUVD-2025-112700

Malicious code in husky-child-process-lint-staged-dynamo npm...

EUVD-2025-113432

Malicious code in framework-epimetheus-dynamo-radiant npm...

EUVD-2025-114284

Malicious code in dynamo-docusaurus-iota-restart npm...

EUVD-2025-115277

Malicious code in cluster-markdownlint-equinox-dynamo npm...

EUVD-2025-120613

Malicious code in webdriver-manager-dynamo-gridsome-ariel npm...

EUVD-2025-123514

Malicious code in postcss-loader-sagitta-dynamo-altair npm...

EUVD-2025-116852

Malicious code in airbnb-centaurus-command-dynamo npm...

EUVD-2025-115922

Malicious code in build-configstore-kronos-dynamo npm...

EUVD-2025-115284

Malicious code in cluster-dynamo-morgan-radiant npm...

EUVD-2025-114283

Malicious code in dynamo-express-quito-avior npm...

EUVD-2025-114282

Malicious code in dynamo-jwt-figures-convict npm...

EUVD-2025-121704

Malicious code in sqlite-atlas-dynamo-passport npm...

EUVD-2025-114275

Malicious code in dynamo-parcel-helios-centauri npm...

MAL-2025-144004 Malicious code in jsonp-pegasus-metalsmith-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0357063f5ac8327173d6d17b484ae86c65356bf7045fd583f4ea653d3758cc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113574

Malicious code in fomalhaut-dynamo-luna-tailwindcss npm...

EUVD-2025-114263

Malicious code in eclipse-dotenv-sagitta-dynamo npm...

Malicious code in transport-dynamo-hyperion-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e02a9b6950f1c0062ca81f751201a1d3e82b793e604f56bfe93c574fe06b780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-dynamo-lyra-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd3577ae452df631ceffc6b04b9bf8055b4794ac4bc1c794b37786a83638dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141838 Malicious code in dynamo-sirius-envconfig-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2df72fdf1db31d3ba69f10d1afc738c0f61de9b9b53083f7d7d2e1388e1bf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142680 Malicious code in framework-epimetheus-dynamo-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478efc3b4b38da17d0d9e7f57a3b8184ba903e348c6c29973c0d063a315656c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...