EUVD-2025-112716

Malicious code in hugo-prompts-install-nodejs npm...

EUVD-2025-122007

Malicious code in shelljs-install-shelljs-proxima npm...

EUVD-2025-124276

Malicious code in norma-janus-install-arcturus npm...

EUVD-2025-122150

Malicious code in sedna-leda-virgo-install npm...

Malicious code in passport-enif-mui-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5626ffd43d33b0508ce9ce7847dcff8549b1c9574852e9b1ea289574f876d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112445

Malicious code in install-bellatrix-firebase-webpack npm...

Malicious code in sedna-leda-virgo-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678811bc3418cea8107e8a9fe3f77efb20d7b071be856ea9696257f6c00d563a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113150

Malicious code in google-install-octans-webpack npm...

Malicious code in auriga-install-express-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec57c878f1c91a3125ce5d22ce4ca93c160d03d8b9c78e896caf971f7b8fb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116379

Malicious code in auth-install-express-prompts npm...

EUVD-2025-111522

Malicious code in lynx-install-nightmare-private npm...

EUVD-2025-112441

Malicious code in install-config-hydra-pm2 npm...

EUVD-2025-120985

Malicious code in umbriel-install-cygnus-markdown npm...

EUVD-2025-121459

Malicious code in taurus-install-eslint-plugin-sadr npm...

EUVD-2025-112773

Malicious code in hexo-csrf-slides-install npm...

EUVD-2025-114764

Malicious code in csv-kastra-install-winston npm...

EUVD-2025-111562

Malicious code in loopback-install-cosmos-juno npm...

Malicious code in rimraf-pegasus-blaze-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65013a25305c06788d4bd511b1ba06e797528dce411fd77dba655986b5ca4b61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139723 Malicious code in auth-install-express-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc84c9cea7a462d14f089d9789f7cf7e51ace437fac4962b642f9119a22902e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149449 Malicious code in weywot-xanadu-yaml-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af256ea19ec7939f7d812a35ccd8b4063717d2babec01599fb27e8c8eab0868c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...