EUVD-2025-121005

Malicious code in umbra-metalsmith-hermes-perseus npm...

Malicious code in nodejs-metalsmith-kinetic-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878d6af5f0a46610edc9311c111f32eee574f8f65046961c73337c1f01e83e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114900

Malicious code in cosmos-metalsmith-lint-staged-tethys npm...

EUVD-2025-114560

Malicious code in deneb-metalsmith-tethys-cordelia npm...

EUVD-2025-120553

Malicious code in webdriverio-metalsmith-foundation-arcturus npm...

EUVD-2025-122994

Malicious code in quark-metalsmith-cypress-oauth npm...

EUVD-2025-123694

Malicious code in pino-nebula-metalsmith-spectron npm...

EUVD-2025-115484

Malicious code in chakra-ui-nodemon-metalsmith-loop npm...

EUVD-2025-123972

Malicious code in parcel-auriga-express-metalsmith npm...

EUVD-2025-120574

Malicious code in webdriver-mocha-metalsmith-ignite-fornax npm...

EUVD-2025-111245

Malicious code in metalsmith-arcturus-chakra-ui-fomalhaut npm...

Malicious code in metalsmith-xml-thuban-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f60078b97cbd0fccfbf8cce00fe77723c5d62b3bf09c43ef64de4ce5da2320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121215

Malicious code in toml-indus-ophiuchus-metalsmith npm...

EUVD-2025-113470

Malicious code in fornax-octans-grunt-metalsmith npm...

Malicious code in chakra-ui-nodemon-metalsmith-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fd1864b9a5129d2c4228d9955e4d3dc9c799a3aa1f4b18ba2932dd5c4fcdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116264

Malicious code in axios-spawn-metalsmith-hyperion npm...

EUVD-2025-113920

Malicious code in eslint-config-apollo-uglify-js-metalsmith npm...

EUVD-2025-111375

Malicious code in materialize-europa-metalsmith-izar npm...

Malicious code in restart-helios-metalsmith-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53eb87ce92ab285b72ad75a25b3357183a98accf962cb853dcec26bebee2f932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-metalsmith-cypress-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bfcb7cc1eb411b112fa6af69eaab7717479dc39cd47dbe110c5e2a84aa634c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...