EUVD-2025-122107

Malicious code in selenium-stream-fetch-deneb npm...

EUVD-2025-113653

Malicious code in fetch-start-carpo-pino npm...

EUVD-2025-115178

Malicious code in commitizen-fetch-leda-webpack npm...

EUVD-2025-113654

Malicious code in fetch-socketio-cosmiconfig-tool npm...

EUVD-2025-111529

Malicious code in luna-ultra-fetch-odin npm...

EUVD-2025-112176

Malicious code in jest-venus-fetch-firebase npm...

EUVD-2025-112262

Malicious code in jasmine-fetch-standard-terser-webpack-plugin npm...

Malicious code in nashira-fetch-cressida-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f86b96208f69b0e6e8c4f0832ea94f5eb903f45afd4f8c34dccb3a6a079114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121872

Malicious code in socketio-fetch-jekyll-bellatrix npm...

EUVD-2025-113656

Malicious code in fetch-pyxis-inquirer-dynamo npm...

EUVD-2025-112527

Malicious code in ini-delphinus-fetch-sync npm...

EUVD-2025-121620

Malicious code in stop-thuban-fetch-electron-builder npm...

EUVD-2025-112389

Malicious code in iota-fetch-cressida-kronos npm...

Malicious code in helmet-fetch-forever-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f391ec557d8ee6b9bfce69e1b4b34811b1c8d9489505d4781de415a10601aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112906

Malicious code in heka-jsonp-triton-fetch npm...

EUVD-2025-114760

Malicious code in csv-neptune-fetch-meteor npm...

Malicious code in iota-fetch-cressida-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c4f0e250d0f01e37aa7792b1b4a8643a196c2c813a8e3e6686f406cf1d3ccb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113664

Malicious code in fetch-husky-slides-sedna npm...

MAL-2025-149601 Malicious code in xanadu-miranda-fetch-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef337b74baee56faf0b2022c88234dbf3f417113cf143aa873275ff626573d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142435 Malicious code in fetch-bootes-concurrently-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73770f8dd611198563c5d0eae11af04fd9b01fbc2d8ab53e3b77989f6c6ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...