EUVD-2025-115578

Malicious code in centauri-enceladus-fork-perseus npm...

EUVD-2025-115562

Malicious code in centaurus-fork-webpack-react-bootstrap npm...

EUVD-2025-115036

Malicious code in convict-fork-pyxis-library npm...

EUVD-2025-116533

Malicious code in arcturus-fork-cassini-jwt npm...

EUVD-2025-116471

Malicious code in async-node-sass-fork-pulsar npm...

EUVD-2025-116424

Malicious code in auriga-fork-jupiter-hyperion npm...

EUVD-2025-116285

Malicious code in await-yildun-canopus-fork npm...

EUVD-2025-116057

Malicious code in blitz-fork-umbra-toml npm...

EUVD-2025-116054

Malicious code in blitz-koa-umbra-fork npm...

EUVD-2025-115878

Malicious code in bulma-remark-fork-equinox npm...

EUVD-2025-116849

Malicious code in airbnb-fork-mutation-fusion npm...

Malicious code in nestjs-fork-draco-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c955d990db2c8b50291158cda63b6a0c64616f530042044ca39f552cee4010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149825 Malicious code in yildun-vuetify-fork-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368ed533673888e54c66221181fd64ec8dc89a8f4b0172d01172e1acc14a28b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147950 Malicious code in sirius-fork-nodejs-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6c1bd831399d8c2b516a325a12d79cba13a091a76042525b7e1c1c6feb29e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142637 Malicious code in fornax-metalsmith-fork-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e5b8e68461ff828257fd3b73d19f935cbd1d9b9033b8aea6b327f49d220c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142581 Malicious code in fork-carpo-xenos-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d435d055edbf91ca49fedb64f445e1a347374a30a36f392b0215d325440de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142585 Malicious code in fork-deneb-markdownlint-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba93b7930e02ad6837f30249a13d5e8d223ae7bce1c99c7df9c99223d8c22ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115249

Malicious code in colors-phoenix-eslint-config-fork npm...

EUVD-2025-112320

Malicious code in jabbah-stop-fork-andromeda npm...

Malicious code in fork-run-script-json-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a487508b75acecea952348bb04e9172b5b203a5e9a7c982696c74b83d7457b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...