EUVD-2025-178628

Malicious code in gulp-parcel-bioinformatics-halley npm...

EUVD-2025-177866

Malicious code in meteor-chalk-blueshift-gulp npm...

EUVD-2025-178127

Malicious code in less-loader-gulp-yaml-crust npm...

EUVD-2025-121981

Malicious code in sirius-cressida-gulp-subscription npm...

EUVD-2025-121355

Malicious code in test-gulp-charon-janus npm...

EUVD-2025-120692

Malicious code in vulcan-gulp-ora-browserify npm...

EUVD-2025-112993

Malicious code in gulp-nightmare-postcss-cordelia npm...

EUVD-2025-116928

Malicious code in acamar-gulp-forever-solis npm...

EUVD-2025-113887

Malicious code in eslint-markdown-pdf-gulp-eleventy npm...

Malicious code in adonis-gulp-ini-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123511

Malicious code in postcss-loader-slidev-gulp-bellatrix npm...

Malicious code in lint-staged-ganymede-titan-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac0691969c683ccf6abff93d005c2db42f31a9073ea430084172a3c7938c763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115203

Malicious code in command-gulp-stream-stream npm...

EUVD-2025-113344

Malicious code in gacrux-gulp-proxima-prettier npm...

EUVD-2025-122712

Malicious code in relay-sedna-gulp-altair npm...

Malicious code in test-gulp-charon-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0d0b29895741df36eac04a6503a42748cbc25a8cb6c273d2444900b7c35c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141470 Malicious code in dagda-gulp-quito-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38fa31b4443045d2b86867d4fa9fa611f6bc0f4d9c699520e9f00fad3713e9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112996

Malicious code in gulp-iota-sass-loader-cygnus npm...

EUVD-2025-112987

Malicious code in gulp-webdriver-mocha-yildun-iota npm...

Malicious code in command-gulp-stream-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce8a4d9de37e9592ba9e3c891cf04f83429c155a22194a21fdf1bb9a7af61ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...