EUVD-2025-176657

Malicious code in restart-andromeda-levels-geckodriver npm...

EUVD-2025-180449

Malicious code in alphard-fetch-electron-builder-levels npm...

EUVD-2025-178113

Malicious code in levels-lacerta-entanglement-entanglement npm...

EUVD-2025-178341

Malicious code in iota-levels-foundation-solis npm...

EUVD-2025-176460

Malicious code in sedna-nova-readable-levels npm...

EUVD-2025-177897

Malicious code in mesosphere-bootes-primatology-levels npm...

EUVD-2025-176340

Malicious code in slidev-levels-install-jasmine npm...

EUVD-2025-177603

Malicious code in nightmare-version-levels-mui npm...

EUVD-2025-178118

Malicious code in levels-await-postcss-comet npm...

EUVD-2025-179793

Malicious code in chakra-ui-levels-mdx-mongoose npm...

EUVD-2025-177594

Malicious code in nightwatch-levels-lepton-phoebe npm...

EUVD-2025-180292

Malicious code in astrochemistry-planckscale-levels-singularitarianism npm...

EUVD-2025-179203

Malicious code in eclipse-levels-lynx-nanotechnology npm...

EUVD-2025-176149

Malicious code in subscription-proxima-levels-phenomic npm...

PT-2025-46797

Missing Authorization vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Appointment Booking Calendar: from n/a through = 1.3.95...

EUVD-2025-114821

Malicious code in csrf-levels-terser-zephyr npm...

EUVD-2025-111563

Malicious code in loopback-global-levels-dorado npm...

Malicious code in cygnus-levels-subscription-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90b2d8d106bb26841ff41f634e063ad188c5b35f57d9914a41b250957cf913d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120225

Malicious code in xerxes-got-gatsby-levels npm...

EUVD-2025-124469

Malicious code in nightmare-xanthus-axios-levels npm...