EUVD-2025-113042

Malicious code in grunt-prettier-lacerta-miranda npm...

EUVD-2025-111865

Malicious code in lacerta-mutation-lyra-loop npm...

EUVD-2025-120609

Malicious code in webdriver-manager-fusion-winston-lacerta npm...

EUVD-2025-111860

Malicious code in lacerta-vulcan-lacerta-hercules npm...

EUVD-2025-122136

Malicious code in sedna-postcss-gravity-lacerta npm...

EUVD-2025-114060

Malicious code in enif-gatsby-fetch-lacerta npm...

EUVD-2025-116077

Malicious code in blaze-lacerta-semantic-ui-yonder npm...

EUVD-2025-122058

Malicious code in sequelize-equinox-lacerta-nightwatch npm...

EUVD-2025-123986

Malicious code in package-lacerta-flare-telesto npm...

EUVD-2025-111864

Malicious code in lacerta-optimize-css-assets-webpack-plugin-unuk-prettier npm...

EUVD-2025-112463

Malicious code in inquirer-lacerta-build-octans npm...

Malicious code in lacerta-rest-mocha-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd2cea9b29f12c8809dbad7c7cc15741dc113c1461e85f0325ef348e76f7845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112767

Malicious code in hexo-lacerta-colors-deneb npm...

Malicious code in ursa-jwt-lacerta-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef56c704920dd44671d3c0efe77e25cf3249240f4fe7d77f265fe02e8a816a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114664

Malicious code in dactyl-lacerta-inquirer-scorpius npm...

EUVD-2025-113170

Malicious code in global-loglevel-lacerta-figures npm...

EUVD-2025-121900

Malicious code in soap-lacerta-development-element-ui npm...

EUVD-2025-111873

Malicious code in lacerta-geckodriver-tool-private npm...

Malicious code in eslint-plugin-chai-lacerta-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ac9c2490e31cd01f911ada3fe41b454765bdacb067fe04d3d6dd4851be3643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lacerta-hyperion-cors-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9832123a085550ecf3b72f0ef1e00f4cde4b0f3289e6500118e6db913e8a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...