EUVD-2025-111229

Malicious code in metalsmith-optimize-css-assets-webpack-plugin-kinetic-slidev npm...

EUVD-2025-121594

Malicious code in style-loader-metalsmith-jasmine-eslint-config npm...

EUVD-2025-124351

Malicious code in nodejs-metalsmith-kinetic-tool npm...

EUVD-2025-124094

Malicious code in ophiuchus-metalsmith-apollo-fomalhaut npm...

Malicious code in nightwatch-antares-metalsmith-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f06e94825fd03af1c67ebc7115780a78cf7033eef31ba02eaffe4a492872a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115739

Malicious code in canopus-pavo-hexo-metalsmith npm...

EUVD-2025-120925

Malicious code in upgrade-callisto-metalsmith-europa npm...

EUVD-2025-121506

Malicious code in sync-eclipse-metalsmith-csv npm...

EUVD-2025-123759

Malicious code in phoebe-metalsmith-css-minimizer-webpack-plugin-umbra npm...

EUVD-2025-111443

Malicious code in magellan-update-config-metalsmith npm...

EUVD-2025-124811

Malicious code in module-koa-metalsmith-xenon npm...

MAL-2025-147354 Malicious code in rest-metalsmith-phoebe-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8177a5231f64f91ad462497824a507ac608aa02801a73de1d55a927c0e339d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142830 Malicious code in gatsby-antares-metalsmith-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0608261a0fe9f89fd63b28a2f5ae4ea7d0bda75b02105c40feee677bf54f4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146162 Malicious code in phoebe-metalsmith-css-minimizer-webpack-plugin-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7758742d6ce3f84c41f899059c9fa2f6d10ec4d81abe2446f4316493355a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120574

Malicious code in webdriver-mocha-metalsmith-ignite-fornax npm...

EUVD-2025-111375

Malicious code in materialize-europa-metalsmith-izar npm...

EUVD-2025-114900

Malicious code in cosmos-metalsmith-lint-staged-tethys npm...

EUVD-2025-123590

Malicious code in polaris-cordelia-jekyll-metalsmith npm...

EUVD-2025-111219

Malicious code in metalsmith-yakutsk-juno-dagda npm...

MAL-2025-144004 Malicious code in jsonp-pegasus-metalsmith-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0357063f5ac8327173d6d17b484ae86c65356bf7045fd583f4ea653d3758cc61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...