EUVD-2025-113666

Malicious code in fetch-hexo-commitlint-config-angular-metalsmith npm...

EUVD-2025-112667

Malicious code in hydra-iota-metalsmith-dotenv-safe npm...

Malicious code in metalsmith-mui-less-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb6388df2ae8ef88d5d36c437f612beb5e1f332ee1c03c546e1444a4f4f673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122539

Malicious code in restart-helios-metalsmith-prompts npm...

Malicious code in metalsmith-build-cressida-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5013b4dca24d60518ca66a9e686616355a3dfc7e97e90c957bcdd137193aa8da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123450

Malicious code in prettier-nuxtjs-metalsmith-miranda npm...

EUVD-2025-124464

Malicious code in nightwatch-antares-metalsmith-library npm...

Malicious code in procyon-nodejs-link-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6885027c9d224f1ad6b3459b777b2bc5cea2880932235a3b714080e6f01573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111834

Malicious code in leda-metalsmith-cassini-avior npm...

EUVD-2025-121617

Malicious code in stop-winston-bulma-metalsmith npm...

EUVD-2025-111218

Malicious code in metalsmith-yildun-rocket-install npm...

EUVD-2025-114802

Malicious code in css-loader-metalsmith-rest-tailwindcss npm...

EUVD-2025-124769

Malicious code in mongoose-colors-private-metalsmith npm...

EUVD-2025-114507

Malicious code in despina-octans-metalsmith-html-webpack-plugin npm...

Malicious code in ceres-fusion-socketio-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7105ca67c5b8aedcc54f1b0cf18f9cfd0d84ee3f95d357d759668152e07dfce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111238

Malicious code in metalsmith-graphql-pegasus-hermes npm...

EUVD-2025-122148

Malicious code in sedna-metalsmith-vulcan-yakutsk npm...

EUVD-2025-113405

Malicious code in frontend-magellan-metalsmith-chai npm...

Malicious code in mensa-pm2-metalsmith-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72ea2f2a560fc4b72000c61b87d0ddd8f12ee8d94bad7f9d136763ea938ef30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144877 Malicious code in metalsmith-graphql-pegasus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17541e872a174d77d0112b013ca7a42e843793669c3082e2c94fd27cdf7dfa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...