EUVD-2025-123132

Malicious code in publish-jekyll-miranda-exec npm...

EUVD-2025-123050

Malicious code in pyxis-config-eslint-plugin-exec npm...

EUVD-2025-124743

Malicious code in morgan-exec-uninstall-janus npm...

EUVD-2025-124603

Malicious code in nconf-exec-blitz-node-config npm...

EUVD-2025-124559

Malicious code in neptune-exec-radiant-wasat npm...

EUVD-2025-124310

Malicious code in non-blocking-html-webpack-plugin-exec-epimetheus npm...

Malicious code in antares-perseus-indus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e171dc30c5618b4fb6ccfc0b3dc6ebf43932d473dddf05dff6be591c1695b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140990 Malicious code in commitlint-jovian-exec-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a83712f940d043472046dfe7c051ea32c09b485d15a401d1e980e1167464e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113753

Malicious code in exec-parcel-tailwindcss-markdown npm...

MAL-2025-142604 Malicious code in fornax-adonis-odin-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1057fa9aa80b77472c8729ad36c4948d1d200c0d3c2f3786e76cdf47a9a791b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139979 Malicious code in betelgeuse-exec-update-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e555950e15a7e2b4e020ff7b30c178cb7e9d44c348eb8310e6831db7125e83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139280 Malicious code in aldebaran-grus-playwright-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e02caa4a0202f9fe74340d729f4014eb8e1fbf97483fdef1e9ccf1041ea252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113754

Malicious code in exec-nuxtjs-async-await npm...

EUVD-2025-111609

Malicious code in loglevel-cross-env-exec-update npm...

EUVD-2025-112637

Malicious code in hyperion-grus-aether-exec npm...

EUVD-2025-112582

Malicious code in ignite-terser-semantic-release-exec npm...

EUVD-2025-111942

Malicious code in kinetic-exec-spectron-webdriver-child-process npm...

EUVD-2025-111839

Malicious code in leda-jabbah-exec-prettier-stylelint npm...

Malicious code in await-proxima-mui-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d650a20b5908dc81ddf5fe514abf51c8ed0990e33cfb1fe510b4db247ea4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dione-tool-exec-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0ede422a77bce351eab9cf913afa16a03cefcaf54961116943e70c3e322778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...