EUVD-2025-124399

Malicious code in node-config-upgrade-library-carpo npm...

EUVD-2025-121663

Malicious code in start-avior-node-config-zephyr npm...

EUVD-2025-120600

Malicious code in webdriver-manager-node-config-kronos-prettier npm...

EUVD-2025-111756

Malicious code in levels-node-config-nodejs-dione npm...

EUVD-2025-124603

Malicious code in nconf-exec-blitz-node-config npm...

EUVD-2025-124410

Malicious code in node-config-jasmine-sass-loader-mocha npm...

EUVD-2025-124413

Malicious code in node-config-gatsby-terser-antares npm...

EUVD-2025-124409

Malicious code in node-config-juno-install-iota npm...

EUVD-2025-123131

Malicious code in publish-karma-ora-node-config npm...

EUVD-2025-124412

Malicious code in node-config-heka-metalsmith-rimraf npm...

EUVD-2025-124403

Malicious code in node-config-sadr-node-sass-loglevel npm...

EUVD-2025-124408

Malicious code in node-config-kronos-miranda-loopback npm...

EUVD-2025-111702

Malicious code in link-kinetic-phenomic-node-config npm...

Malicious code in node-config-aquarius-selenium-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e5c2af9e703d23e07f831f6ce27c38ee3fc7977eb88fccce182c8f6d1b82b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112740

Malicious code in html-webpack-plugin-slides-bunyan-node-config npm...

EUVD-2025-124419

Malicious code in node-config-aquarius-selenium-betelgeuse npm...

EUVD-2025-113684

Malicious code in farout-sync-regulus-node-config npm...

EUVD-2025-111646

Malicious code in lint-staged-terser-chakra-ui-node-config npm...

EUVD-2025-121354

Malicious code in test-meissa-node-config-vega npm...

MAL-2025-145475 Malicious code in nightwatch-node-config-node-config-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c474c424b69fafd765d12e27755c0381c66b0f348f254abc2bd4a1dc5aa1273c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...