EUVD-2025-113138

Malicious code in got-antares-jest-adonis npm...

EUVD-2025-113133

Malicious code in got-gulp-docusaurus-geckodriver npm...

EUVD-2025-113128

Malicious code in got-release-it-nodemon-callisto npm...

EUVD-2025-114016

Malicious code in epimetheus-fomalhaut-got-duplex npm...

EUVD-2025-113883

Malicious code in eslint-plugin-carina-telesto-got npm...

EUVD-2025-115538

Malicious code in ceres-kronos-warp-got npm...

EUVD-2025-115171

Malicious code in commitizen-nestjs-got-ultra npm...

EUVD-2025-121219

Malicious code in toml-figures-got-cygnus npm...

EUVD-2025-113125

Malicious code in got-sadr-mocha-sync npm...

EUVD-2025-112145

Malicious code in json-chromedriver-pegasus-got npm...

Malicious code in got-antares-jest-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1574c432ca6f79ac02267947c03993a142d4617d78594c0ad0cdcee8f052011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in got-cz-conventional-changelog-sequelize-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f81f7d992dbf6659b45459cc75d1a9b5726289e9afa6ea52420f9c94b6c56fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-quantum-eleventy-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63b4e934385a03280aa2645464ad16fc7f357141f2855f0aa71d9066fa1d3618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-xanthus-got-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75781e4fdfbf44aaa54bd56aabe7774674004a1a0f8c21d181238759f9a854f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-pavo-terser-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ffff8cf6a504a54d7a9a9b8193efbb4dfc00ae43a56bc384e678ccea487576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webdriverio-link-pino-pretty-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa79428782cb74d0590db651ef2f95b2ab2a1a1efad5f7d841d627547af0f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113119

Malicious code in got-ursa-css-minimizer-webpack-plugin-redis npm...

Malicious code in axios-thuban-eslint-plugin-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f8a4f3e23670bbf493f18b8c5c2ef9d2b11ab2ab82c4a82ebb877c44b82bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113134

Malicious code in got-enceladus-aether-terser npm...

EUVD-2025-120318

Malicious code in xanadu-umbra-got-reveal-md npm...