EUVD-2025-113907

Malicious code in eslint-config-morgan-javascript-umbra npm...

EUVD-2025-114180

Malicious code in electron-rimraf-orbit-javascript npm...

EUVD-2025-113909

Malicious code in eslint-config-inquirer-commitlint-config-angular-sirius npm...

EUVD-2025-124131

Malicious code in odin-carpo-init-altair npm...

EUVD-2025-112275

Malicious code in janus-tethys-meteor-comet npm...

EUVD-2025-122253

Malicious code in sass-loader-gravity-draco-miranda npm...

EUVD-2025-112526

Malicious code in ini-draco-frontend-quark npm...

EUVD-2025-123163

Malicious code in public-gatsby-figures-hugo npm...

EUVD-2025-115702

Malicious code in carina-centaurus-blaze-terser-webpack-plugin npm...

EUVD-2025-114098

Malicious code in eleventy-sails-inquirer-javascript npm...

Malicious code in javascript-pegasus-chariklo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6997bd3466d1dbc0d2d8e506913bb83f681fd0e26386f1abe92ec640aecc0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-parcel-electron-builder-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d82865d2c4c118814f34f9e55544cc147c81d7874040ad365913faf99ebac58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116873

Malicious code in aether-cygnus-nodejs-got npm...

EUVD-2025-111203

Malicious code in meteor-google-jekyll-query npm...

EUVD-2025-124348

Malicious code in nodejs-pegasus-rehype-adonis npm...

EUVD-2025-115489

Malicious code in chakra-ui-jekyll-algol-prompts npm...

EUVD-2025-121832

Malicious code in spawn-apollo-envconfig-jabbah npm...

EUVD-2025-111287

Malicious code in meissa-prettier-plugin-markdown-celeste-vortex npm...

EUVD-2025-123809

Malicious code in perseus-rollup-plugin-xanthus-node-config npm...

Malicious code in vuetify-postcss-loader-mongodb-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1901883a12e5906a3aa40a43f8816c93e38fefb894c40b8271a376d5bb6d12d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...