EUVD-2025-177877

Malicious code in metalsmith-antares-barnard-yildun npm...

Malicious code in metalsmith-antares-barnard-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450389a4510dcbb902b1868e1dfe320565f58b8703cf3b2c809d5d1dce57c4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114385

Malicious code in dotenv-parse-variables-jwt-soap-metalsmith npm...

MAL-2025-142642 Malicious code in fornax-octans-grunt-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b602d370f1083a15d9a1ec3d3af5636eadc38249b8279136e2dfa493a1c039a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122278

Malicious code in sails-dependencies-metalsmith-equinox npm...

Malicious code in neptune-meteor-oscillation-metalsmith (npm)

The package neptune-meteor-oscillation-metalsmith was found to contain malicious code...