EUVD-2025-180160

Malicious code in babel-isostasy-fork-buffer npm...

EUVD-2025-175782

Malicious code in upsilon-fork-pi-index-emulate npm...

EUVD-2025-176479

Malicious code in secure-eta-throw-index-fork npm...

EUVD-2025-176791

Malicious code in rate-limiter-fork-command-hyperion npm...

EUVD-2025-179690

Malicious code in cluster-wind-fork-view-monitor npm...

EUVD-2025-176691

Malicious code in report-thread-benchmark-good-fork npm...

EUVD-2025-180004

Malicious code in boolean-fork-uglify-dog-sanitize npm...

EUVD-2025-177411

Malicious code in orchestrate-awk-encrypt-moon-fork npm...

EUVD-2025-180012

Malicious code in book-compile-try-fork-kernel npm...

EUVD-2025-179708

Malicious code in cloud-star-parse-fork-sandbox npm...

Malicious code in tau-fork-hot-web-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1535674fe21c755cbdb872d3615e3794dce7ac1ab4df9d0b4982a0903171a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-wind-fork-view-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5047c654c3a5d136a00aaba828d7028a4483a1b72fb55a1d2ffff40fcb45f3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179868

Malicious code in cassini-markdown-pdf-fork-polaris npm...

EUVD-2025-178385

Malicious code in install-fork-mdx-websockets npm...

EUVD-2025-180398

Malicious code in apex-fork-jupiter-winston npm...

EUVD-2025-176059

Malicious code in tau-fork-hot-web-big npm...

EUVD-2025-178241

Malicious code in jupiter-fork-axios-magellan npm...

EUVD-2025-175865

Malicious code in try-import-fork-socket-beta npm...

EUVD-2025-179616

Malicious code in concurrently-fork-blazar-helios npm...

Malicious code in rate-limiter-fork-command-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8de1f20d686d73ab00b93d7d050066e33427b1fe2051dc19a4ef17226e48fd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...