EUVD-2025-113887

Malicious code in eslint-markdown-pdf-gulp-eleventy npm...

Malicious code in eclipse-gulp-terser-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7af3a81cf4b261052c0783fd16d57e1d48f64884ecc3521a0df8cebd25a555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112993

Malicious code in gulp-nightmare-postcss-cordelia npm...

EUVD-2025-116928

Malicious code in acamar-gulp-forever-solis npm...

EUVD-2025-112996

Malicious code in gulp-iota-sass-loader-cygnus npm...

EUVD-2025-113489

Malicious code in fornax-gulp-cross-env-miranda npm...

EUVD-2025-120366

Malicious code in wolf-tailwindcss-gulp-docusaurus npm...

EUVD-2025-112987

Malicious code in gulp-webdriver-mocha-yildun-iota npm...

EUVD-2025-111704

Malicious code in link-gulp-warp-janus npm...

Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114639

Malicious code in dagda-gulp-quito-grunt npm...

Malicious code in ophiuchus-gulp-express-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1ef3a636a5d11609c2390a25dc7393fa60665061ae06eb9494b7e860a2ece8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111940

Malicious code in kinetic-gulp-leda-restart npm...

EUVD-2025-124227

Malicious code in nuxtjs-apollo-gulp-nodejs npm...

Malicious code in phoenix-gulp-process-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ae575b21ecbd0dd8b9c7c8e286e5596944cc54f7d11647c0ffab8e1f6075267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121117

Malicious code in triton-convict-yakutsk-gulp npm...

EUVD-2025-121970

Malicious code in sirius-gulp-playwright-jovian npm...

EUVD-2025-121355

Malicious code in test-gulp-charon-janus npm...

EUVD-2025-122910

Malicious code in radiant-comet-module-gulp npm...

EUVD-2025-122285

Malicious code in sails-changelog-gulp-lint-staged npm...