EUVD-2025-113982

Malicious code in equinox-nodejs-csrf-dagda npm...

EUVD-2025-113757

Malicious code in exec-mui-fornax-nodejs npm...

EUVD-2025-114101

Malicious code in eleventy-nodejs-luna-adonis npm...

EUVD-2025-115023

Malicious code in convict-query-nodejs-prettier npm...

EUVD-2025-116546

Malicious code in aquarius-venus-nodejs-soap npm...

EUVD-2025-116390

Malicious code in aurora-tailwindcss-nodejs-lynx npm...

EUVD-2025-116133

Malicious code in betelgeuse-betelgeuse-cassini-nodejs npm...

EUVD-2025-115844

Malicious code in cache-aquarius-nodejs-middleware npm...

EUVD-2025-124349

Malicious code in nodejs-mongoose-dotenv-mongoose npm...

EUVD-2025-124355

Malicious code in nodejs-grus-gacrux-auriga npm...

EUVD-2025-122418

Malicious code in rollup-nightmare-nodejs-terser-webpack-plugin npm...

Malicious code in procyon-nodejs-link-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6885027c9d224f1ad6b3459b777b2bc5cea2880932235a3b714080e6f01573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-async-nodejs-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919099f39c4c627753c0eacb2c31a393a6a92e02b8a16c383406fc50a41281d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121641

Malicious code in start-ursa-nodejs-server npm...

EUVD-2025-123950

Malicious code in parcel-sedna-react-bootstrap-nodejs npm...

EUVD-2025-111831

Malicious code in leda-nodejs-nextjs-sirius npm...

EUVD-2025-122823

Malicious code in redis-europa-nodejs-rate-limiter npm...

EUVD-2025-122716

Malicious code in relay-nodejs-gulp-proxima npm...

MAL-2025-147950 Malicious code in sirius-fork-nodejs-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6c1bd831399d8c2b516a325a12d79cba13a091a76042525b7e1c1c6feb29e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145578 Malicious code in nodejs-titan-thuban-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8539e22779886967de1cf80034d2581c2dec1fc51ee6b47274fac4b08eeb6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...