EUVD-2025-120251

Malicious code in xenos-halley-nextjs-ini npm...

EUVD-2025-115816

Malicious code in cache-xo-ini-wolf npm...

EUVD-2025-113473

Malicious code in fornax-mongodb-ini-sass-loader npm...

EUVD-2025-111306

Malicious code in meissa-ini-xo-fomalhaut npm...

EUVD-2025-114225

Malicious code in elara-package-ini-colors npm...

EUVD-2025-112504

Malicious code in ini-tailwindcss-playwright-nova npm...

EUVD-2025-121864

Malicious code in socketio-proxima-ini-venus npm...

EUVD-2025-121221

Malicious code in toml-cross-env-private-ini npm...

EUVD-2025-112384

Malicious code in iota-jasmine-ini-lyra npm...

EUVD-2025-114739

Malicious code in cygnus-ini-duplex-eris npm...

EUVD-2025-113600

Malicious code in firebase-rigel-fornax-ini npm...

MAL-2025-142379 Malicious code in express-ini-soap-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49eae2ca0c7684bc542e8a3126f14f9e1a4ab907103a7c6013ca9cd73841ec41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115590

Malicious code in celeste-optimize-css-assets-webpack-plugin-bulma-ini npm...

EUVD-2025-122917

Malicious code in quito-subscription-neptune-ini npm...

EUVD-2025-112502

Malicious code in ini-wasat-react-bootstrap-javascript npm...

MAL-2025-140041 Malicious code in blitz-cross-env-ini-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6aac823acd3e3c267be48e988aa756d7993859affa2c0bcf864a109ee1f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112530

Malicious code in ini-chalk-cors-colors npm...

MAL-2025-149680 Malicious code in xenos-halley-nextjs-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea90a89f7e2f9754822f85568e845254ae760b8796313aa877aac600d48ae5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143610 Malicious code in ini-vuetify-test-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be5d587a84d0e961ff412a526515fd88cceea5cffce76773278d75a3fa00347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141251 Malicious code in cross-env-dactyl-regulus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67417c0546de377a93c13bd911465029d14604266a506e6c88506f7c9d86cd1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...