EUVD-2025-124397

Malicious code in node-config-warp-resolvers-tethys npm...

EUVD-2025-123351

Malicious code in process-spinner-node-config-meteor npm...

EUVD-2025-115304

Malicious code in cli-node-config-eridanus-dione npm...

EUVD-2025-122853

Malicious code in react-bootstrap-nightwatch-phoenix-node-config npm...

EUVD-2025-124853

Malicious code in mocha-aldebaran-nashira-node-config npm...

EUVD-2025-116640

Malicious code in antd-node-config-slides-lyra npm...

EUVD-2025-112411

Malicious code in io-node-config-rate-limiter-concurrently npm...

EUVD-2025-124405

Malicious code in node-config-non-blocking-meissa-middleware npm...

EUVD-2025-121968

Malicious code in sirius-impulse-node-config-spica npm...

EUVD-2025-120368

Malicious code in wolf-sequelize-gatsby-node-config npm...

MAL-2025-149849 Malicious code in zenith-fomalhaut-acamar-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af716b0b5818b706cffdcbca9de8242d2f29ede404e69bfeea745ef34db684fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145503 Malicious code in node-config-ariel-cosmiconfig-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511e6c9da4678fdbcc5910ed10531ec1bf199ca08705ff5cc0ffc8eacc6f05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144468 Malicious code in lint-staged-terser-chakra-ui-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0555aa83a6752f98aa45cf50f95aab2be0bb0f5156ba979089b0af5a64a3f030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142489 Malicious code in firebase-charon-node-config-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b995051a7142a276f04ec88281667d77e5e1ef909b5dc5770fe7f2d136fe09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-45331 Malicious code in node-config-toml-deimos-pegasus (npm)

The package node-config-toml-deimos-pegasus was found to contain malicious code...

Malicious code in radioastronomy-node-config-antd-selenium (npm)

The package radioastronomy-node-config-antd-selenium was found to contain malicious code...

MAL-2025-45332 Malicious code in node-config-wolf-enif-eslint (npm)

The package node-config-wolf-enif-eslint was found to contain malicious code...

MAL-2025-45180 Malicious code in metalsmith-node-config-dotenv-safe-bellatrix (npm)

The package metalsmith-node-config-dotenv-safe-bellatrix was found to contain malicious code...

Malicious code in node-config-wolf-enif-eslint (npm)

The package node-config-wolf-enif-eslint was found to contain malicious code...

Malicious code in node-config-toml-deimos-pegasus (npm)

The package node-config-toml-deimos-pegasus was found to contain malicious code...