EUVD-2025-122073

Malicious code in semantic-ui-kaus-install-centaurus npm...

EUVD-2025-124276

Malicious code in norma-janus-install-arcturus npm...

EUVD-2025-123402

Malicious code in prettier-stylelint-sync-install-loopback npm...

EUVD-2025-112426

Malicious code in install-testcafe-quark-meissa npm...

EUVD-2025-122216

Malicious code in scorpius-config-ursa-install npm...

EUVD-2025-111378

Malicious code in materialize-css-loader-install-dagda npm...

EUVD-2025-111376

Malicious code in materialize-europa-install-query npm...

EUVD-2025-112716

Malicious code in hugo-prompts-install-nodejs npm...

Malicious code in auriga-install-express-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec57c878f1c91a3125ce5d22ce4ca93c160d03d8b9c78e896caf971f7b8fb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124667

Malicious code in mysql-kinetic-xenos-install npm...

EUVD-2025-113150

Malicious code in google-install-octans-webpack npm...

EUVD-2025-112443

Malicious code in install-build-readable-gacrux npm...

EUVD-2025-112356

Malicious code in izar-kronos-install-epimetheus npm...

MAL-2025-143690 Malicious code in install-uninstall-mira-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e84c856cd0e9886740c1235d889f235ed09f42e79e4b38c5ce76c4e8b49ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149449 Malicious code in weywot-xanadu-yaml-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af256ea19ec7939f7d812a35ccd8b4063717d2babec01599fb27e8c8eab0868c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143396 Malicious code in hugo-prompts-install-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323f5bb8d985d0dc02ff975746ce4d5f88126d9da820e1d55eb820e3a144653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145645 Malicious code in norma-janus-install-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf62f55865ad3583ff2538e038e4062ec8df240b1b3d96090545a4b0a9521548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143339 Malicious code in hexo-csrf-slides-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4060512652c1775f10dad8705e2c562273f340ce3d86a7b19b503e23e9b2928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143689 Malicious code in install-uninstall-eridanus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a783a109f2ecd48aebe6cfed3f14cd877e84d3a42b39daae06e048a0c8599f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143687 Malicious code in install-testcafe-quark-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4974a01ca69fac48c452e695ebc3893a9ca2b8964f0b67369be05735fc7101e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...