EUVD-2025-111646

Malicious code in lint-staged-terser-chakra-ui-node-config npm...

EUVD-2025-112705

Malicious code in hugo-transport-node-config-hermes npm...

EUVD-2025-113838

Malicious code in europa-indus-dorado-node-config npm...

MAL-2025-140136 Malicious code in browserify-node-config-impulse-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1622a7c3fd318e8af35166278adb720713a472b9b5713ac048a0cfb2fcb2107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111702

Malicious code in link-kinetic-phenomic-node-config npm...

EUVD-2025-124783

Malicious code in mongodb-package-quark-node-config npm...

EUVD-2025-124413

Malicious code in node-config-gatsby-terser-antares npm...

EUVD-2025-120600

Malicious code in webdriver-manager-node-config-kronos-prettier npm...

EUVD-2025-120155

Malicious code in yakutsk-postgres-tool-node-config npm...

EUVD-2025-124400

Malicious code in node-config-umbriel-ignite-sirius npm...

EUVD-2025-124603

Malicious code in nconf-exec-blitz-node-config npm...

EUVD-2025-121354

Malicious code in test-meissa-node-config-vega npm...

EUVD-2025-124419

Malicious code in node-config-aquarius-selenium-betelgeuse npm...

EUVD-2025-121663

Malicious code in start-avior-node-config-zephyr npm...

EUVD-2025-123131

Malicious code in publish-karma-ora-node-config npm...

EUVD-2025-112740

Malicious code in html-webpack-plugin-slides-bunyan-node-config npm...

EUVD-2025-124399

Malicious code in node-config-upgrade-library-carpo npm...

EUVD-2025-124412

Malicious code in node-config-heka-metalsmith-rimraf npm...

EUVD-2025-124398

Malicious code in node-config-vuetify-less-loader-version npm...

MAL-2025-142426 Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...