EUVD-2025-111942

Malicious code in kinetic-exec-spectron-webdriver-child-process npm...

EUVD-2025-113747

Malicious code in exec-winston-loop-nightwatch npm...

EUVD-2025-122555

Malicious code in rest-sqlite-exec-hugo npm...

EUVD-2025-113764

Malicious code in exec-jekyll-redis-apollo npm...

EUVD-2025-114425

Malicious code in dorado-chalk-canopus-exec npm...

Malicious code in magellan-elara-galaxy-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecc1f280efec6e223c5ae6de10a1150bed55d41918ceafc38f2c3c28c88a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-chalk-canopus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9780f97be9dad27f3d893ac69914d86d4366e962fcb1202373b7f0fab22d148d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120830

Malicious code in vega-supervisor-exec-taurus npm...

EUVD-2025-120819

Malicious code in venus-exec-sagitta-ophiuchus npm...

EUVD-2025-113766

Malicious code in exec-indus-quark-semantic-release npm...

EUVD-2025-113754

Malicious code in exec-nuxtjs-async-await npm...

EUVD-2025-112637

Malicious code in hyperion-grus-aether-exec npm...

EUVD-2025-122575

Malicious code in rest-exec-graphql-algol npm...

EUVD-2025-121669

Malicious code in standard-markdown-pdf-lyra-exec npm...

EUVD-2025-123454

Malicious code in prettier-fornax-exec-halley npm...

EUVD-2025-124743

Malicious code in morgan-exec-uninstall-janus npm...

EUVD-2025-116298

Malicious code in await-proxima-mui-exec npm...

EUVD-2025-121841

Malicious code in solis-repository-envconfig-exec npm...

EUVD-2025-121460

Malicious code in taurus-exec-javascript-repository npm...

Malicious code in spica-eris-spica-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...