EUVD-2025-123719

Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll npm...

EUVD-2025-124628

Malicious code in native-magellan-despina-callback npm...

EUVD-2025-124625

Malicious code in native-puppeteer-sagitta-cosmiconfig npm...

EUVD-2025-124621

Malicious code in native-venus-kastra-pino npm...

EUVD-2025-124429

Malicious code in nightwatch-triton-equinox-native npm...

EUVD-2025-124012

Malicious code in orbit-native-dotenv-oauth npm...

EUVD-2025-123932

Malicious code in pavo-altair-native-achernar npm...

Malicious code in rimraf-native-wezen-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f783af03f5cd53bdf2d57a926a7e3f1eac33d66fc2c6865ab531181c7f231f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-bunyan-centaurus-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7041aeb6d4b6daae8b199986a9b05f5f12ff05ec198d264fea5a5274b2a9b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121226

Malicious code in toml-chalk-restart-native npm...

EUVD-2025-124622

Malicious code in native-terser-polaris-xml npm...

EUVD-2025-115814

Malicious code in callback-adonis-native-ophiuchus npm...

EUVD-2025-122502

Malicious code in reveal-md-oberon-native-exec npm...

EUVD-2025-122854

Malicious code in react-bootstrap-native-rehype-style-loader npm...

EUVD-2025-112219

Malicious code in javascript-umbriel-kronos-native npm...

EUVD-2025-124630

Malicious code in native-enif-redis-redis npm...

Malicious code in stop-dactyl-native-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e75d4c1b12be6cab04ee7f5ac141232ed1154e896eae56fd8e00baf86a39cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144393 Malicious code in library-zenobia-native-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9620d5a9059a59c24af888f0c640dcbdd31ad3e5c571b59e3b1c48a9264c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124633

Malicious code in native-backend-dotenv-safe-mongodb npm...

MAL-2025-148648 Malicious code in thuban-development-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970fc2cf7485e3a83f92015f3ef345dc16d84cdf3b6f96adcc69731705a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...