EUVD-2025-124672

Malicious code in mysql-firebase-websockets-mini-css-extract-plugin npm...

EUVD-2025-124599

Malicious code in nconf-jekyll-firebase-prettier npm...

EUVD-2025-124552

Malicious code in neptune-morgan-firebase-aquarius npm...

EUVD-2025-124487

Malicious code in nightmare-envconfig-nestjs-firebase npm...

EUVD-2025-124383

Malicious code in node-sass-firebase-enceladus-loopback npm...

EUVD-2025-124176

Malicious code in oberon-firebase-jupiter-winston npm...

EUVD-2025-124175

Malicious code in oberon-firebase-tailwindcss-procyon npm...

EUVD-2025-124147

Malicious code in octans-mensa-public-firebase npm...

EUVD-2025-124885

Malicious code in miranda-firebase-non-blocking-cygnus npm...

EUVD-2025-113616

Malicious code in firebase-eleventy-protractor-vortex npm...

EUVD-2025-113613

Malicious code in firebase-frontend-apollo-perseus npm...

EUVD-2025-122974

Malicious code in quasar-firebase-fornax-eslint-config npm...

EUVD-2025-111273

Malicious code in mensa-apollo-firebase-lint-staged npm...

EUVD-2025-124602

Malicious code in nconf-firebase-async-mongodb npm...

EUVD-2025-114877

Malicious code in cressida-ganymede-firebase-google npm...

EUVD-2025-111485

Malicious code in magellan-cross-env-fornax-firebase npm...

EUVD-2025-122069

Malicious code in semantic-ui-perseus-firebase-cypress npm...

EUVD-2025-121400

Malicious code in terser-meissa-firebase-lyra npm...

MAL-2025-146079 Malicious code in perseus-cosmiconfig-firebase-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e221b7d2beb77b6059c0e71a9fb1f02ee2fdfa97680094407cb6f1af94797df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142489 Malicious code in firebase-charon-node-config-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b995051a7142a276f04ec88281667d77e5e1ef909b5dc5770fe7f2d136fe09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...