EUVD-2025-116366

Malicious code in auth0-atlas-bunyan-jsonp npm...

EUVD-2025-114309

Malicious code in draco-webdriver-mocha-writable-jsonp npm...

EUVD-2025-112205

Malicious code in jekyll-jsonp-slidev-bunyan npm...

Malicious code in jsonp-charon-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c33c6c2772ea53aa5ecd5175c851302123b223a7990f46762cba9948111efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112111

Malicious code in jsonp-nightmare-leda-rollup npm...

EUVD-2025-112104

Malicious code in jsonp-spawn-cypress-solis npm...

EUVD-2025-116202

Malicious code in barnard-aether-jsonp-farout npm...

Malicious code in bellatrix-jsonp-octans-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9cd63d924544f73e5e2bbc1774277ccf7945d6e8a5f3117ce855a7d85bebbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116297

Malicious code in await-quark-kronos-jsonp npm...

EUVD-2025-112760

Malicious code in hexo-sails-element-ui-jsonp npm...

EUVD-2025-124186

Malicious code in oauth-jsonp-figures-postcss-loader npm...

EUVD-2025-122244

Malicious code in sass-loader-native-jsonp-callisto npm...

Malicious code in dorado-jsonp-alphard-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d986aac1302f1d13be93e50f6e9f51836d226d7e9f291313b280eaec194504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124005

Malicious code in orbit-uglify-js-jsonp-jekyll npm...

Malicious code in pegasus-sequelize-antares-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40c7b357b282c6107b66be25d25844369b3d99f701ca4c7acdb78e404c6d9d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112109

Malicious code in jsonp-pegasus-metalsmith-dynamo npm...

EUVD-2025-114419

Malicious code in dorado-jsonp-alphard-vuetify npm...

EUVD-2025-115911

Malicious code in build-terser-chariklo-jsonp npm...

EUVD-2025-122721

Malicious code in relay-jsonp-jsonp-csrf npm...

Malicious code in convict-jsonp-query-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e948925b47961d78429f6f8ac1d7b338bfdcf54557a2179edf315cc354e1fc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...