EUVD-2025-87948

Malicious code in vocationalcarpz3n npm...

EUVD-2025-78352

Malicious code in selectiveearwigz3n npm...

Malicious code in joni-ikan3-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 557978bd63fd5d8d5cc9c53eb5b56259072af203d877d9cf87f88a5f2829c3af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97837 Malicious code in galih-semur75-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418adc285145d4abec5767018d572ef8c7f7cf636ca7fbcc2bb0bab485584b43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73285

Malicious code in thoughtlessratz3n npm...

EUVD-2025-73029

Malicious code in violentquokkaz3n npm...

EUVD-2025-66965

Malicious code in rudi-nasi34-riris npm...

EUVD-2025-60015

Malicious code in dono-teh59-sluey npm...

EUVD-2025-48432

Malicious code in cici-kue63-sukiwir npm...

EUVD-2025-45828

Malicious code in patria-toge18-sukiwir npm...

EUVD-2025-46063

Malicious code in obligedshrewz3n npm...

MAL-2025-57825 Malicious code in nina-mangut55-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0f91457c1007b8577ec54f2357d82e5e7f0bf7af2c7728e4eee9508d267fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59341 Malicious code in vina-miebogor27-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75e2a47d4cd25ec9bc548fb7920539e91e87de0841cf271b94640ef3888bf77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-takokak71-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5242f4bad2527fcdd593e09e1516143c385b4b8f7b5ac369f9a4f4a1093800de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-41573

Malicious code in bella-gepuk73-riris npm...

MAL-2025-49541 Malicious code in zul-keripik16-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327007e434ebbc070e76832bdbf0c269d6e92ccc5f8bf95b05b50a1f18327509 The package zul-keripik16-apidev was found to contain malicious code...

EUVD-2025-34231

Mailgen has HTML Injection and XSS Filter Bypass in Plaintext Emails...

CVE-2025-62366

mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Mailgen versions through 2.0.30 contain an HTML injection vulnerability in plaintext emails produced by the generatePlaintext method when user‑generated content is supplied. The function attempts t...

Malicious code in redirect-j8m62u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a45464226511d36e1577cefa67e4d6eeabc65682d19be60c094416acaeb3d94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 007-nodejs (>=2.5.0 <=2.5.3) +46037 more potentially affected by CVE-2024-29415 +1 more via ip (>=0.0.1 <=2.0.1)

ip NPM version =0.0.1, =1.0.1, =2.5.0, =2.5.3 - 0726react =0.1.1 - 0me.sh =0.1.15 - 0x0.icu.anima =0.1.0 - 0xgank-tea-advice-pull =1.0.0 - 0xgank-tea-balance-pencil =1.0.0 - 0xgank-tea-brick-bell =1.0.0 - 0xgank-tea-cake-victory =1.0.0 - 0xgank-tea-central-compound =1.0.0 -...