EUVD-2025-120242

Malicious code in xenos-run-script-weywot-exec npm...

EUVD-2025-124559

Malicious code in neptune-exec-radiant-wasat npm...

EUVD-2025-113772

Malicious code in exec-enceladus-axios-eslint-config npm...

EUVD-2025-121764

Malicious code in spica-eris-spica-exec npm...

EUVD-2025-122680

Malicious code in remark-async-development-exec npm...

EUVD-2025-113758

Malicious code in exec-mocha-pipe-repository npm...

EUVD-2025-113753

Malicious code in exec-parcel-tailwindcss-markdown npm...

Malicious code in vega-supervisor-exec-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b36eecda9d3527991832751c533eeff3acb6d01350295eb3cbc83637ae07ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-spica-passport-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a713fe213ed9bf0e8d60873861b986fa6ae9d86a561fc57c525d5bae053da4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115126

Malicious code in commitlint-exec-express-perseus npm...

EUVD-2025-111482

Malicious code in magellan-elara-galaxy-exec npm...

EUVD-2025-114143

Malicious code in element-ui-exec-magellan-aurora npm...

EUVD-2025-115118

Malicious code in commitlint-jovian-exec-figures npm...

EUVD-2025-115403

Malicious code in chariklo-mongoose-corvus-exec npm...

EUVD-2025-123050

Malicious code in pyxis-config-eslint-plugin-exec npm...

EUVD-2025-114878

Malicious code in cressida-exec-element-ui-farout npm...

EUVD-2025-113270

Malicious code in gatsby-exec-foundation-gulp npm...

EUVD-2025-124310

Malicious code in non-blocking-html-webpack-plugin-exec-epimetheus npm...

Malicious code in nightwatch-elektra-impulse-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2eb8e6510ea2b0fe73a9d801e439dec04f4efc6545ba6b27f35e11ed2a826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-exec-javascript-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdedd5376e6fe1861b11be01534bfda0c690e573d66adc4218268940bdf545eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...