EUVD-2025-113514

Malicious code in fork-semantic-ui-version-transform npm...

EUVD-2025-113512

Malicious code in fork-start-node-sass-neptune npm...

EUVD-2025-113511

Malicious code in fork-update-stop-pegasus npm...

EUVD-2025-114553

Malicious code in deneb-regulus-fork-morgan npm...

EUVD-2025-114325

Malicious code in dotenv-solis-hydra-fork npm...

EUVD-2025-114305

Malicious code in duplex-browserify-magellan-fork npm...

EUVD-2025-115578

Malicious code in centauri-enceladus-fork-perseus npm...

EUVD-2025-115562

Malicious code in centaurus-fork-webpack-react-bootstrap npm...

EUVD-2025-116471

Malicious code in async-node-sass-fork-pulsar npm...

EUVD-2025-116285

Malicious code in await-yildun-canopus-fork npm...

EUVD-2025-116057

Malicious code in blitz-fork-umbra-toml npm...

EUVD-2025-116054

Malicious code in blitz-koa-umbra-fork npm...

EUVD-2025-116849

Malicious code in airbnb-fork-mutation-fusion npm...

Malicious code in nestjs-fork-draco-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c955d990db2c8b50291158cda63b6a0c64616f530042044ca39f552cee4010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122077

Malicious code in semantic-ui-fork-development-jest npm...

EUVD-2025-115878

Malicious code in bulma-remark-fork-equinox npm...

MAL-2025-142585 Malicious code in fork-deneb-markdownlint-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba93b7930e02ad6837f30249a13d5e8d223ae7bce1c99c7df9c99223d8c22ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142592 Malicious code in fork-less-loader-stream-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f983e20b23c6c3ea63bfec0d0eb328ca07ecf008967e2c5e765651916732d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143564 Malicious code in indus-fork-rimraf-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa831a89833772caceac7a6c6708f1dc1efc4af5b76d2e7f5c29c49b52d87fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142591 Malicious code in fork-juno-link-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5851779d975f0f23b872722829c51245198fc88dd1c6a17deb0d272d4ece99f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...