EUVD-2025-115567

Malicious code in centaurus-arcturus-prettier-metalsmith npm...

EUVD-2025-111219

Malicious code in metalsmith-yakutsk-juno-dagda npm...

EUVD-2025-111223

Malicious code in metalsmith-vulcan-lint-staged-acamar npm...

EUVD-2025-121506

Malicious code in sync-eclipse-metalsmith-csv npm...

EUVD-2025-111231

Malicious code in metalsmith-nashira-antares-shelljs npm...

EUVD-2025-111421

Malicious code in markdown-pdf-metalsmith-vortex-geckodriver npm...

EUVD-2025-111834

Malicious code in leda-metalsmith-cassini-avior npm...

EUVD-2025-123534

Malicious code in postcss-eslint-semantic-ui-metalsmith npm...

Malicious code in metalsmith-cluster-epimetheus-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98d400e6ef7fdc5422b770c6416d4ad559acf5cc084450d0220141b598d71d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111242

Malicious code in metalsmith-cluster-epimetheus-backend npm...

Malicious code in mensa-pm2-metalsmith-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72ea2f2a560fc4b72000c61b87d0ddd8f12ee8d94bad7f9d136763ea938ef30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111256

Malicious code in mensa-pm2-metalsmith-eslint-config npm...

EUVD-2025-120925

Malicious code in upgrade-callisto-metalsmith-europa npm...

EUVD-2025-112667

Malicious code in hydra-iota-metalsmith-dotenv-safe npm...

EUVD-2025-123189

Malicious code in proxima-quark-metalsmith-jasmine npm...

EUVD-2025-121796

Malicious code in spectron-webdriver-fusion-nightmare-metalsmith npm...

EUVD-2025-111226

Malicious code in metalsmith-sagitta-less-loader-xanadu npm...

EUVD-2025-115360

Malicious code in child-process-framework-metalsmith-celeste npm...

EUVD-2025-124351

Malicious code in nodejs-metalsmith-kinetic-tool npm...

Malicious code in metalsmith-elektra-fetch-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad4825d26657e1d808e320ba35d6115608876599dc6bf3bba69bae9ba3c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...