EUVD-2025-113591

Malicious code in flare-antares-altair-jest npm...

EUVD-2025-111980

Malicious code in kastra-stop-vuetify-jest npm...

EUVD-2025-123606

Malicious code in pm2-wezen-jest-acamar npm...

EUVD-2025-121741

Malicious code in spinner-adonis-jest-callisto npm...

EUVD-2025-112188

Malicious code in jest-heka-wasat-rimraf npm...

EUVD-2025-120159

Malicious code in yakutsk-jest-sequelize-helios npm...

EUVD-2025-120837

Malicious code in vega-jest-leda-kinetic npm...

EUVD-2025-112178

Malicious code in jest-solis-aldebaran-markdownlint npm...

EUVD-2025-122077

Malicious code in semantic-ui-fork-development-jest npm...

EUVD-2025-124727

Malicious code in morgan-warp-gacrux-jest npm...

EUVD-2025-112194

Malicious code in jest-corvus-prettier-plugin-markdown-charon npm...

Malicious code in jest-hermes-configstore-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55cfe725d260f2ff8e857501ff3c86c3d6102de8a1412fb9208bb9189e66ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143944 Malicious code in jovian-cypress-jest-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e2b9e3444820e95800b552b57d6c7399b7dded8bad0ccbd8b38717f8ec1364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143447 Malicious code in hydra-neptune-ursa-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f2466f1c63b9af43445c6198a8406ebd2242dd1b880f0afe6363f9e08a1119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122359

Malicious code in sadr-jest-await-elektra npm...

MAL-2025-149092 Malicious code in vega-jest-leda-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97bcabc2b8fcfc5de703127ae1c9a7161c8f7d69c0fd95ffbecaf28045c4da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-hoist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20b09510a5986b0d378b1a5d9f7c081cd5d2bb67ad05f55090240bb0e976729e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview jest-hoist is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

EUVD-2025-36868

Malicious code in jest-hoist npm...

MAL-2025-49013 Malicious code in jest-hoist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20b09510a5986b0d378b1a5d9f7c081cd5d2bb67ad05f55090240bb0e976729e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...