EUVD-2025-111419

Malicious code in markdown-pdf-mongoose-hapi-janus npm...

Malicious code in start-mongoose-scripts-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8881d3331a199f19842e80240df5da41adea1181cadde5924c73d69f70e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123305

Malicious code in procyon-supervisor-mongoose-hugo npm...

EUVD-2025-123879

Malicious code in pegasus-mongoose-nconf-charon npm...

EUVD-2025-121007

Malicious code in umbra-meissa-mongoose-flare npm...

EUVD-2025-115560

Malicious code in centaurus-mongoose-antares-ora npm...

EUVD-2025-124553

Malicious code in neptune-mongoose-kastra-slidev npm...

EUVD-2025-120787

Malicious code in version-mongoose-cors-semantic-release npm...

EUVD-2025-121545

Malicious code in superagent-eleventy-mongoose-schema npm...

EUVD-2025-112865

Malicious code in helmet-convict-mongoose-cz-conventional-changelog npm...

EUVD-2025-115852

Malicious code in bunyan-promise-mongoose-restart npm...

EUVD-2025-124752

Malicious code in mongoose-ursa-csrf-pino-pretty npm...

EUVD-2025-124757

Malicious code in mongoose-nextjs-tailwindcss-xml npm...

EUVD-2025-124767

Malicious code in mongoose-enif-apollo-eris npm...

EUVD-2025-124755

Malicious code in mongoose-prompts-spectron-lint-staged npm...

EUVD-2025-111886

Malicious code in kronos-soap-mongoose-nightwatch npm...

EUVD-2025-116038

Malicious code in blitz-thuban-mongoose-janus npm...

MAL-2025-145011 Malicious code in mira-janus-mongoose-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0171b3e4f13eb46e037d4896a616a9276aa90bacfb5cd5c1f5e85e1cc27fadda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146957 Malicious code in quasar-query-mongoose-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5788a81fa1f290385db35fb12fe9885e283c9069d337479ea30915f15012fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141259 Malicious code in cross-env-mongoose-juno-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed32850119f2ab08cc8fcad8533e7034e3c689822c26222db357b516b7554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...