EUVD-2025-177479

Malicious code in odin-toml-element-ui-flare npm...

Malicious code in hermes-dactyl-canopus-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62799d2b20f03765f78f7108ecd6c29ff5e28773faa479e8584065f639f569e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186997 Malicious code in flare-polaris-sadr-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ed2baf393192b5d6507e61ac34292a1a2f72fa14241f210bfb3dff96c5dcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124643

Malicious code in nashira-flare-rollup-plugin-despina npm...

EUVD-2025-116734

Malicious code in altair-subscription-flare-loglevel npm...

EUVD-2025-111311

Malicious code in meissa-flare-thuban-gemini npm...

EUVD-2025-111388

Malicious code in markdownlint-sedna-flare-grus npm...

EUVD-2025-122929

Malicious code in quito-flare-convict-thuban npm...

EUVD-2025-114000

Malicious code in epimetheus-superagent-flare-fornax npm...

EUVD-2025-113580

Malicious code in flare-markdown-nuxtjs-bootstrap npm...

Malicious code in flare-koa-version-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743fef05b826eca569bd55c8b8e63b265ee14b3619c017ffaf94b5c85fd9cbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111481

Malicious code in magellan-flare-duplex-izar npm...

Malicious code in rehype-tailwindcss-spica-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbaa22480822e3bd06fffd321d2be249fa65838c2ae86440d457b59409ec3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123069

Malicious code in puppeteer-ganymede-hermes-flare npm...

EUVD-2025-121007

Malicious code in umbra-meissa-mongoose-flare npm...

EUVD-2025-112863

Malicious code in helmet-dactyl-flare-uglify-js npm...

EUVD-2025-121630

Malicious code in stop-flare-graphql-webdriverio npm...

EUVD-2025-122734

Malicious code in rehype-tailwindcss-spica-flare npm...

EUVD-2025-113774

Malicious code in exec-apex-auriga-flare npm...

Malicious code in package-lacerta-flare-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b12d33c2b7f19771cf94dccb61768ae2e06bb35df870afffde0794f6b13a9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...