EUVD-2025-121509

Malicious code in sync-commitlint-materialize-eris npm...

EUVD-2025-123318

Malicious code in procyon-materialize-non-blocking-sqlite npm...

EUVD-2025-113579

Malicious code in flare-materialize-passport-nightwatch npm...

EUVD-2025-111382

Malicious code in materialize-await-cosmiconfig-slides npm...

EUVD-2025-112557

Malicious code in indus-astro-materialize-miranda npm...

EUVD-2025-114357

Malicious code in dotenv-safe-gemini-spica-materialize npm...

EUVD-2025-111381

Malicious code in materialize-await-equinox-parcel npm...

EUVD-2025-123014

Malicious code in quantum-materialize-sqlite-jovian npm...

EUVD-2025-111377

Malicious code in materialize-electron-builder-deimos-mui npm...

EUVD-2025-111375

Malicious code in materialize-europa-metalsmith-izar npm...

EUVD-2025-120385

Malicious code in wolf-dactyl-materialize-parcel npm...

EUVD-2025-113321

Malicious code in galaxy-materialize-morgan-meissa npm...

EUVD-2025-111963

Malicious code in kaus-materialize-event-prettier-plugin-markdown npm...

EUVD-2025-123177

Malicious code in proxima-terser-webpack-plugin-materialize-rollup npm...

EUVD-2025-111361

Malicious code in materialize-semantic-ui-cache-spinner npm...

Malicious code in materialize-europa-install-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c34f5b580e515d57b2f97959e41b59126793c501180fdc1ce97b11c5f06699d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121373

Malicious code in terser-webpack-plugin-materialize-hugo-neptune npm...

EUVD-2025-113784

Malicious code in event-style-loader-quasar-materialize npm...

EUVD-2025-115955

Malicious code in browserify-zenobia-materialize-event npm...

Malicious code in browserify-zenobia-materialize-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 339578953fb444bcd3f114e5653528f83fed64a2fc5df25d57b79ce80fcc4f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...