EUVD-2025-112488

Malicious code in init-ignite-weywot-webpack npm...

EUVD-2025-112498

Malicious code in init-bootes-radiant-aether npm...

EUVD-2025-112500

Malicious code in init-antares-deneb-orbit npm...

Malicious code in telesto-wezen-mira-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c54640330a7c458d507a8b7649de4017b059ecab3bba9f5938aeb85fce4cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120046

Malicious code in zephyr-init-json-cosmiconfig npm...

EUVD-2025-112478

Malicious code in init-writable-pino-semantic-release npm...

EUVD-2025-120160

Malicious code in yakutsk-init-neptune-fomalhaut npm...

EUVD-2025-115862

Malicious code in bunyan-gridsome-init-andromeda npm...

EUVD-2025-114823

Malicious code in csrf-init-apollo-hyperion npm...

EUVD-2025-112479

Malicious code in init-wezen-umbriel-hyperion npm...

Malicious code in electron-init-vulcan-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c5e6f24339422a4e699c277728da0d25f2a1f37dc597f3e8b9dbfdcff9bc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115768

Malicious code in callisto-koa-passport-init npm...

EUVD-2025-112487

Malicious code in init-kastra-leda-canopus npm...

EUVD-2025-115103

Malicious code in concurrently-fusion-init-izar npm...

EUVD-2025-115701

Malicious code in carina-chalk-init-astro npm...

EUVD-2025-112492

Malicious code in init-gemini-cassini-warp npm...

Malicious code in eslint-gatsby-init-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2927981e2214a116cfa4d45c9f21260f04a036db99fe2eeedc2531cb6b09dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122862

Malicious code in react-bootstrap-hapi-init-quantum npm...

EUVD-2025-122649

Malicious code in repository-mdx-init-xanthus npm...

Malicious code in odin-carpo-init-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84df6db1ad28199f71552122f364b369efb4868373a65e0ed553444b217fb422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...