EUVD-2025-112543

Malicious code in indus-nconf-jekyll-yonder npm...

EUVD-2025-121311

Malicious code in tethys-enif-nconf-telesto npm...

Malicious code in markdownlint-lacerta-solis-nconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a350fe7ddc11ca9a567e3847734b551ccef89edc4b2674c0c9470a0aaef37b1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112079

Malicious code in juno-nconf-odin-xanadu npm...

EUVD-2025-111773

Malicious code in less-nconf-global-hapi npm...

EUVD-2025-115467

Malicious code in chalk-gemini-nconf-cz-conventional-changelog npm...

EUVD-2025-124600

Malicious code in nconf-janus-commitizen-socketio npm...

EUVD-2025-124601

Malicious code in nconf-hercules-prettier-stylelint-slides npm...

EUVD-2025-124608

Malicious code in nconf-electron-commitizen-pegasus npm...

EUVD-2025-116227

Malicious code in babel-xanadu-nconf-nashira npm...

Malicious code in nconf-query-browserify-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602bc965a67989211f80bd7ee2b62886edbfc35af6a27e879381d16defcb3ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113371

Malicious code in fusion-nconf-venus-reveal-md npm...

EUVD-2025-124612

Malicious code in nconf-commitizen-semantic-release-testcafe npm...

EUVD-2025-116288

Malicious code in await-wezen-nconf-meteor npm...

EUVD-2025-120701

Malicious code in vulcan-css-loader-command-nconf npm...

EUVD-2025-123290

Malicious code in promise-antares-nconf-elara npm...

EUVD-2025-124610

Malicious code in nconf-deimos-postcss-delphinus npm...

EUVD-2025-112775

Malicious code in hexo-changelog-sagitta-nconf npm...

MAL-2025-145304 Malicious code in nconf-babel-leda-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd58af62c423f22dc1dd348dd58260892dca5d44f791cf0bdced57cc4e3d30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-nconf-gemini-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdbfcb6b83ef7147b4041123d4274295e736f9b5059e57e55db63cc993bb9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...