EUVD-2025-124476

Malicious code in nightmare-rigel-playwright-markdown npm...

EUVD-2025-111700

Malicious code in link-meissa-colors-nightmare npm...

EUVD-2025-112111

Malicious code in jsonp-nightmare-leda-rollup npm...

EUVD-2025-121268

Malicious code in thuban-parcel-fornax-nightmare npm...

EUVD-2025-122756

Malicious code in rehype-docusaurus-nightmare-node-config npm...

Malicious code in rollup-nightmare-nodejs-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013d8c46a1af7deb1ec86ef06930fca85b4c0bc9fa04823847913c05b0e6d62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124473

Malicious code in nightmare-sequelize-proxima-eslint npm...

EUVD-2025-111522

Malicious code in lynx-install-nightmare-private npm...

EUVD-2025-121241

Malicious code in titan-nightmare-jabbah-aquarius npm...

EUVD-2025-124483

Malicious code in nightmare-indus-nodejs-xenos npm...

EUVD-2025-114849

Malicious code in cross-env-nightmare-public-buffer npm...

EUVD-2025-121796

Malicious code in spectron-webdriver-fusion-nightmare-metalsmith npm...

EUVD-2025-112379

Malicious code in iota-nightmare-sqlite-bunyan npm...

EUVD-2025-122418

Malicious code in rollup-nightmare-nodejs-terser-webpack-plugin npm...

Malicious code in gulp-nightmare-postcss-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e04c09f791909f37fc08b18b6c1c118ce6c84eb94a477f339f2bd455a5caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111430

Malicious code in markdown-pdf-backend-colors-nightmare npm...

Malicious code in bellatrix-nightmare-sequelize-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4033e737930db4590403436f3a88cf32ddbe9c9595679fd09ecad8b2346f17aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124470

Malicious code in nightmare-ursa-non-blocking-subscription npm...

EUVD-2025-114822

Malicious code in csrf-izar-resolvers-nightmare npm...

EUVD-2025-121380

Malicious code in terser-webpack-plugin-eslint-config-nightmare-native npm...