EUVD-2025-180196

Malicious code in avior-gulp-sagitta-ganymede npm...

EUVD-2025-178237

Malicious code in jwt-firebase-izar-gulp npm...

EUVD-2025-180397

Malicious code in apex-gulp-npm-dione npm...

EUVD-2025-177866

Malicious code in meteor-chalk-blueshift-gulp npm...

EUVD-2025-115203

Malicious code in command-gulp-stream-stream npm...

EUVD-2025-114257

Malicious code in eclipse-gulp-terser-inquirer npm...

EUVD-2025-113846

Malicious code in europa-duplex-gulp-magellan npm...

EUVD-2025-121308

Malicious code in tethys-gulp-bootstrap-colors npm...

EUVD-2025-113000

Malicious code in gulp-browserify-public-betelgeuse npm...

Malicious code in gulp-json-buffer-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5c127955b6f819a7c29832a75f751a7060b856d48eeca69ce552869a8fd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113003

Malicious code in gulp-avior-dependencies-tool npm...

EUVD-2025-114825

Malicious code in csrf-gulp-standard-commitlint npm...

Malicious code in nuxtjs-typeorm-odin-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb79bf491c21dcb65a74826c3c2b5bd591827c065190deef19b049a44d0eb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124227

Malicious code in nuxtjs-apollo-gulp-nodejs npm...

EUVD-2025-123495

Malicious code in postcss-xanthus-gulp-subscription npm...

EUVD-2025-113625

Malicious code in firebase-antares-gulp-elektra npm...

EUVD-2025-121737

Malicious code in spinner-commitlint-wezen-gulp npm...

EUVD-2025-121041

Malicious code in ultra-auriga-gulp-gulp npm...

Malicious code in tethys-gulp-bootstrap-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91010575aafc5a357f617818a3e5202f494f84ef43eb7f26c7cab7739f7235e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-markdown-pdf-gulp-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c270190fb82c3f6cb1ae2215fb4e05a1af89fc5963a7cd63c37138ac749fc92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...