EUVD-2025-113405

Malicious code in frontend-magellan-metalsmith-chai npm...

EUVD-2025-124899

Malicious code in miranda-ariel-metalsmith-css-loader npm...

EUVD-2025-111221

Malicious code in metalsmith-xenos-spica-elara npm...

Malicious code in metalsmith-jabbah-sails-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b31ae985f128fe19af9bee9ae4011ab98d52966a366502d7d9f65c3788a3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-nodemon-metalsmith-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fd1864b9a5129d2c4228d9955e4d3dc9c799a3aa1f4b18ba2932dd5c4fcdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111226

Malicious code in metalsmith-sagitta-less-loader-xanadu npm...

EUVD-2025-115542

Malicious code in ceres-fusion-socketio-metalsmith npm...

EUVD-2025-115356

Malicious code in child-process-metalsmith-sadr-nextjs npm...

EUVD-2025-123972

Malicious code in parcel-auriga-express-metalsmith npm...

EUVD-2025-111421

Malicious code in markdown-pdf-metalsmith-vortex-geckodriver npm...

EUVD-2025-111834

Malicious code in leda-metalsmith-cassini-avior npm...

EUVD-2025-115329

Malicious code in chromedriver-metalsmith-toml-nightwatch npm...

Malicious code in metalsmith-mui-less-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb6388df2ae8ef88d5d36c437f612beb5e1f332ee1c03c546e1444a4f4f673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123534

Malicious code in postcss-eslint-semantic-ui-metalsmith npm...

Malicious code in metalsmith-cluster-epimetheus-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98d400e6ef7fdc5422b770c6416d4ad559acf5cc084450d0220141b598d71d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111242

Malicious code in metalsmith-cluster-epimetheus-backend npm...

Malicious code in mensa-pm2-metalsmith-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72ea2f2a560fc4b72000c61b87d0ddd8f12ee8d94bad7f9d136763ea938ef30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111256

Malicious code in mensa-pm2-metalsmith-eslint-config npm...

EUVD-2025-115360

Malicious code in child-process-framework-metalsmith-celeste npm...

EUVD-2025-124351

Malicious code in nodejs-metalsmith-kinetic-tool npm...