EUVD-2025-115382

Malicious code in charon-lint-envconfig-firebase npm...

EUVD-2025-121505

Malicious code in sync-envconfig-apollo-postcss npm...

EUVD-2025-114028

Malicious code in envconfig-oberon-pegasus-writable npm...

EUVD-2025-123895

Malicious code in pegasus-envconfig-wasat-supervisor npm...

EUVD-2025-122672

Malicious code in remark-magellan-init-envconfig npm...

EUVD-2025-124487

Malicious code in nightmare-envconfig-nestjs-firebase npm...

EUVD-2025-114039

Malicious code in envconfig-cosmos-zenith-upgrade npm...

EUVD-2025-114038

Malicious code in envconfig-csv-build-chai npm...

EUVD-2025-120519

Malicious code in webpack-titan-upgrade-envconfig npm...

EUVD-2025-122025

Malicious code in server-envconfig-registry-concurrently npm...

EUVD-2025-113820

Malicious code in europa-sadr-envconfig-enceladus npm...

EUVD-2025-120847

Malicious code in vega-auriga-envconfig-phoebe npm...

EUVD-2025-122141

Malicious code in sedna-parcel-schema-envconfig npm...

EUVD-2025-124415

Malicious code in node-config-envconfig-eleventy-neptune npm...

Malicious code in webpack-titan-upgrade-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ef361cf0faacfe095bff53e3ccd8868652da7534d2db2933a19a04a97ef813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116192

Malicious code in barnard-kastra-carina-envconfig npm...

Malicious code in miranda-betelgeuse-envconfig-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977a6748a29e58a57fd8cd525fe21429f4ecec35026ca8933ab015673be34932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124153

Malicious code in octans-dagda-winston-envconfig npm...

EUVD-2025-114033

Malicious code in envconfig-loglevel-odin-sequelize npm...

Malicious code in spawn-apollo-envconfig-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7581617c1f3dee8f77877ca1efa376a3bccbff72945c680780c545962c3ea85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...