EUVD-2025-114411

Malicious code in dorado-uglify-js-gemini-chalk npm...

Malicious code in sequelize-nashira-rigel-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59d6fb63fb5556a47a76185951f64c80c5d8364358472ed927bf91c9fa3fdcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-uglify-js-grunt-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7bf0478efc3b2a9cce6d79cf93e4ccee6ad6fb3c74baa90e251c8477bf18ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114893

Malicious code in cosmos-proxima-xerxes-uglify-js npm...

EUVD-2025-114811

Malicious code in csrf-uglify-js-library-procyon npm...

EUVD-2025-115874

Malicious code in bulma-ultra-meteor-uglify-js npm...

EUVD-2025-115715

Malicious code in capella-materialize-uglify-js-webdriverio npm...

EUVD-2025-121716

Malicious code in spinner-semantic-release-nuxtjs-polaris npm...

EUVD-2025-124729

Malicious code in morgan-uglify-js-resolvers-xanadu npm...

EUVD-2025-116658

Malicious code in antares-uglify-js-child-process-galaxy npm...

Malicious code in uglify-js-upgrade-scorpius-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5a619ce4025267f0cd25ec403515e25fd7c994673f76fb3a0cbac6469abc6d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-nestjs-fornax-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f836626a36dad3ac3a3576de198188f321dcd3c9875be1920bea36dab436d7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112863

Malicious code in helmet-dactyl-flare-uglify-js npm...

EUVD-2025-116161

Malicious code in bellatrix-less-blaze-uglify-js npm...

EUVD-2025-122931

Malicious code in quito-eris-markdown-pdf-uglify-js npm...

EUVD-2025-124704

Malicious code in mui-uglify-js-ophiuchus-cluster npm...

EUVD-2025-121052

Malicious code in uglify-js-nuxtjs-karma-atlas npm...

EUVD-2025-112992

Malicious code in gulp-nodejs-bellatrix-process npm...

EUVD-2025-124340

Malicious code in nodemon-geckodriver-mongodb-uglify-js npm...

Malicious code in pavo-less-loader-convict-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bd14deccdda00ebe2d12bd079dde2bd5bbe69e9bb4335c43239ee0a5abf57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...