EUVD-2025-123051

Malicious code in pyxis-charon-neptune-install npm...

EUVD-2025-112546

Malicious code in indus-install-procyon-xenos npm...

EUVD-2025-123566

Malicious code in polaris-meteor-babel-install npm...

EUVD-2025-111869

Malicious code in lacerta-luna-install-alphard npm...

EUVD-2025-122073

Malicious code in semantic-ui-kaus-install-centaurus npm...

EUVD-2025-124276

Malicious code in norma-janus-install-arcturus npm...

EUVD-2025-123402

Malicious code in prettier-stylelint-sync-install-loopback npm...

EUVD-2025-112426

Malicious code in install-testcafe-quark-meissa npm...

EUVD-2025-122216

Malicious code in scorpius-config-ursa-install npm...

EUVD-2025-111378

Malicious code in materialize-css-loader-install-dagda npm...

EUVD-2025-111376

Malicious code in materialize-europa-install-query npm...

EUVD-2025-112716

Malicious code in hugo-prompts-install-nodejs npm...

Malicious code in auriga-install-express-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec57c878f1c91a3125ce5d22ce4ca93c160d03d8b9c78e896caf971f7b8fb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124667

Malicious code in mysql-kinetic-xenos-install npm...

EUVD-2025-113150

Malicious code in google-install-octans-webpack npm...

EUVD-2025-112443

Malicious code in install-build-readable-gacrux npm...

EUVD-2025-112356

Malicious code in izar-kronos-install-epimetheus npm...

MAL-2025-143396 Malicious code in hugo-prompts-install-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323f5bb8d985d0dc02ff975746ce4d5f88126d9da820e1d55eb820e3a144653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145645 Malicious code in norma-janus-install-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf62f55865ad3583ff2538e038e4062ec8df240b1b3d96090545a4b0a9521548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143339 Malicious code in hexo-csrf-slides-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4060512652c1775f10dad8705e2c562273f340ce3d86a7b19b503e23e9b2928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...