EUVD-2025-124745

Malicious code in morgan-duplex-shelljs-odin npm...

EUVD-2025-116075

Malicious code in blaze-octans-morgan-readable npm...

EUVD-2025-115856

Malicious code in bunyan-morgan-gatsby-prompts npm...

EUVD-2025-111599

Malicious code in loglevel-morgan-quito-altair npm...

Malicious code in ignite-morgan-postcss-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121160

Malicious code in transform-morgan-frontend-epimetheus npm...

EUVD-2025-124742

Malicious code in morgan-gravity-lint-altair npm...

EUVD-2025-124731

Malicious code in morgan-release-it-umbriel-pino-pretty npm...

EUVD-2025-116076

Malicious code in blaze-morgan-phoenix-scorpius npm...

EUVD-2025-122469

Malicious code in rimraf-morgan-hugo-quark npm...

EUVD-2025-124733

Malicious code in morgan-npm-json-react-bootstrap npm...

MAL-2025-143519 Malicious code in ignite-morgan-postcss-loader-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69416919d6a5f042a70f254596d0ddf47863aea254d55875387e2df7ffc3ebe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140248 Malicious code in bunyan-morgan-gatsby-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554139500406b867d6abc54a5cdd58fd294ec3edad56fdbbece0f3987411862d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143706 Malicious code in io-sagitta-morgan-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086f999fc627768d00c1afc5e47ec5cdc6e8a75d0c75e284604f764d0763d384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122944

Malicious code in query-sirius-materialize-morgan npm...

EUVD-2025-124740

Malicious code in morgan-init-auth0-rollup npm...

EUVD-2025-121722

Malicious code in spinner-morgan-equinox-wolf npm...

EUVD-2025-121551

Malicious code in superagent-castor-mongoose-morgan npm...

EUVD-2025-121040

Malicious code in ultra-bootes-async-morgan npm...

Malicious code in morgan-miranda-galaxy-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3918e9f0a59a05864fd4d19ced3d18f6a0a259f723e66779962e8377f9f3738e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...