Malicious code in pavo-less-loader-convict-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bd14deccdda00ebe2d12bd079dde2bd5bbe69e9bb4335c43239ee0a5abf57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121776

Malicious code in spica-airbnb-pino-nestjs npm...

EUVD-2025-116442

Malicious code in atlas-terser-uglify-js-solis npm...

Malicious code in uglify-js-dagda-await-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243c74042d730e5159f494bcce2577e075e1b9b265b17bf81e37baff39aa8ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122931

Malicious code in quito-eris-markdown-pdf-uglify-js npm...

EUVD-2025-112871

Malicious code in helios-uglify-js-nextjs-kaus npm...

EUVD-2025-121051

Malicious code in uglify-js-pegasus-proxima-superagent npm...

EUVD-2025-122050

Malicious code in sequelize-nashira-rigel-uglify-js npm...

EUVD-2025-116570

Malicious code in apollo-ursa-tailwindcss-uglify-js npm...

EUVD-2025-115604

Malicious code in celeste-cli-uglify-js-update npm...

EUVD-2025-121050

Malicious code in uglify-js-quantum-vuepress-publish npm...

MAL-2025-147504 Malicious code in rollup-nightmare-nodejs-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013d8c46a1af7deb1ec86ef06930fca85b4c0bc9fa04823847913c05b0e6d62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120782

Malicious code in version-uglify-js-draco-dotenv npm...

EUVD-2025-116068

Malicious code in blaze-uglify-js-schema-subscription npm...

EUVD-2025-123600

Malicious code in polaris-antd-uglify-js-server npm...

Malicious code in nodejs-grus-gacrux-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992d9509225ff4662c83cd02c736feeaf3c3c0e546718d9dc8aa3474d3e661c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113920

Malicious code in eslint-config-apollo-uglify-js-metalsmith npm...

EUVD-2025-120870

Malicious code in ursa-juno-nodejs-exec npm...

MAL-2025-149653 Malicious code in xenon-nodejs-tethys-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f998b73247e2553cb330b9d4d12e6bb5b72e648412770d6e7174d29c01c3dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148868 Malicious code in uglify-js-chalk-spica-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58b881fb56e4e5e9ec3ca7c82173f3ee21d88ef3c5d395f2dc0a52edd7b49e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...