EUVD-2025-176707

Malicious code in release-it-perseus-ini-node-config npm...

EUVD-2025-177578

Malicious code in node-config-commitlint-panspermia-superposition npm...

EUVD-2025-175792

Malicious code in upgrade-dysonswarm-node-config-got npm...

EUVD-2025-176844

Malicious code in quasar-helmet-metabolomics-node-config npm...

EUVD-2025-177577

Malicious code in node-config-cross-env-event-fomalhaut npm...

EUVD-2025-176872

Malicious code in quantum-node-config-quito-cosmos npm...

EUVD-2025-177576

Malicious code in node-config-hexo-version-indus npm...

EUVD-2025-120629

Malicious code in wasat-rollup-plugin-barnard-node-config npm...

EUVD-2025-124408

Malicious code in node-config-kronos-miranda-loopback npm...

Malicious code in perseus-rollup-plugin-xanthus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feafaa1939d92d1ca449f23215a2c7eb5567f8c57c4d6ec8bfeed07fc6ad78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124403

Malicious code in node-config-sadr-node-sass-loglevel npm...

EUVD-2025-124411

Malicious code in node-config-janus-version-sqlite npm...

EUVD-2025-121354

Malicious code in test-meissa-node-config-vega npm...

EUVD-2025-124417

Malicious code in node-config-commitlint-element-ui-avior npm...

EUVD-2025-115304

Malicious code in cli-node-config-eridanus-dione npm...

EUVD-2025-121968

Malicious code in sirius-impulse-node-config-spica npm...

MAL-2025-141525 Malicious code in delphinus-node-config-equinox-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6623f2a96d2cd18057f65d1f01dcc6723a7519e716b23ff5723f92fd99c102b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140644 Malicious code in chalk-jest-nestjs-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab344fb3ee584eae4df856234f3fd3843fd7aa00e09dcf066ce25fce9a0fe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142101 Malicious code in epimetheus-nashira-node-config-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3680ee4ede4d45b354c8e3ae081df1daf439b7b39c5de63cbecbe66cb1ec1eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149849 Malicious code in zenith-fomalhaut-acamar-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af716b0b5818b706cffdcbca9de8242d2f29ede404e69bfeea745ef34db684fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...