EUVD-2025-114288

Malicious code in duplex-vuepress-ini-nightwatch npm...

EUVD-2025-112511

Malicious code in ini-query-bellatrix-quark npm...

EUVD-2025-112507

Malicious code in ini-rollup-plugin-gulp-semantic-ui npm...

EUVD-2025-116374

Malicious code in auth-non-blocking-ini-middleware npm...

Malicious code in cygnus-ini-duplex-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b52fe76d9e5026fde08f9e1d6eb70e48547f0d6ff62a3d66b10fce1d7024f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116891

Malicious code in adonis-gulp-ini-soap npm...

EUVD-2025-120205

Malicious code in xerxes-yaml-ini-redis npm...

EUVD-2025-112529

Malicious code in ini-cors-barnard-xerxes npm...

EUVD-2025-112921

Malicious code in hapi-miranda-changelog-ini npm...

EUVD-2025-111604

Malicious code in loglevel-ini-puppeteer-lyra npm...

EUVD-2025-111426

Malicious code in markdown-pdf-dactyl-ini-fetch npm...

Malicious code in ini-middleware-build-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2246fe3ca33b8fcca8464aa54b16b62c8bb88ab3d1ac8125772343cdea2de33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112517

Malicious code in ini-passport-quito-mongoose npm...

EUVD-2025-122455

Malicious code in rocket-graphql-ini-ini npm...

EUVD-2025-115746

Malicious code in canopus-ini-carpo-standard npm...

EUVD-2025-114241

Malicious code in elara-centauri-ini-draco npm...

EUVD-2025-113586

Malicious code in flare-gridsome-sirius-ini npm...

EUVD-2025-120871

Malicious code in ursa-iota-ini-jupiter npm...

Malicious code in hapi-miranda-changelog-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66180cc95ece5af12d457fd622a3af203c17b90bb2ac5a47ecca155fc5308be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143461 Malicious code in hydra-wasat-venus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a87524dc2b3f47f519c9c541a7e56e09938c109a8cd0a59016f3ba3f8273a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...