EUVD-2025-177108

Malicious code in polaris-publish-vortex-jekyll npm...

EUVD-2025-179972

Malicious code in brane-pm2-isostasy-jekyll npm...

EUVD-2025-121173

Malicious code in tool-stop-magellan-jekyll npm...

EUVD-2025-120759

Malicious code in virgo-semantic-ui-jekyll-kaus npm...

EUVD-2025-115758

Malicious code in callisto-quasar-dependencies-jekyll npm...

EUVD-2025-116443

Malicious code in atlas-standard-global-jekyll npm...

EUVD-2025-111930

Malicious code in kinetic-redis-less-loader-jekyll npm...

MAL-2025-148438 Malicious code in tailwindcss-altair-pavo-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86fe2b5c9951a31ac9bf3e5536a7fc468a21cb1dbdcb6e12a8e3f736aede389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...