EUVD-2025-122258

Malicious code in sass-loader-cors-forever-firebase npm...

EUVD-2025-112272

Malicious code in janus-wezen-firebase-xanthus npm...

EUVD-2025-112176

Malicious code in jest-venus-fetch-firebase npm...

EUVD-2025-124175

Malicious code in oberon-firebase-tailwindcss-procyon npm...

EUVD-2025-113613

Malicious code in firebase-frontend-apollo-perseus npm...

EUVD-2025-112655

Malicious code in hydra-socketio-fornax-firebase npm...

EUVD-2025-111970

Malicious code in kaus-firebase-jabbah-bellatrix npm...

EUVD-2025-111485

Malicious code in magellan-cross-env-fornax-firebase npm...

Malicious code in firebase-bootstrap-xenon-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d3d1a15b135e8c44460a7dd13e05812078c6c8c9f084b23bc476a527c63226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112912

Malicious code in heka-apex-firebase-hyperion npm...

EUVD-2025-113619

Malicious code in firebase-cressida-commitlint-subscription npm...

EUVD-2025-114929

Malicious code in cosmiconfig-firebase-warp-subscription npm...

EUVD-2025-111568

Malicious code in loopback-firebase-postgres-luna npm...

EUVD-2025-116220

Malicious code in backend-configstore-node-sass-firebase npm...

EUVD-2025-120066

Malicious code in zenobia-elara-mongoose-firebase npm...

Malicious code in mensa-apollo-firebase-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e0231c97d5ad71e53184aa2327549e5ad41ea6fbe8a1fb8617a327ce0f28aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-ceres-celeste-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952704ef7609dad642d9aa825a3fe083c766943a6dfa24ad1f0f7e2f82789bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111148

Malicious code in middleware-vulcan-taurus-firebase npm...

EUVD-2025-113605

Malicious code in firebase-optimize-css-assets-webpack-plugin-csv-superagent npm...

EUVD-2025-113866

Malicious code in eslint-plugin-thuban-firebase-centauri npm...