EUVD-2025-121182

Malicious code in tool-nodemon-hexo-restart npm...

EUVD-2025-124340

Malicious code in nodemon-geckodriver-mongodb-uglify-js npm...

EUVD-2025-124336

Malicious code in nodemon-mongoose-middleware-kastra npm...

EUVD-2025-122992

Malicious code in quark-nodemon-geckodriver-sequelize npm...

EUVD-2025-120917

Malicious code in upgrade-flare-delphinus-nodemon npm...

EUVD-2025-124034

Malicious code in ora-jest-nodemon-levels npm...

EUVD-2025-124442

Malicious code in nightwatch-pino-pretty-publish-nodemon npm...

EUVD-2025-112444

Malicious code in install-betelgeuse-zenith-nodemon npm...

EUVD-2025-115252

Malicious code in colors-nodemon-changelog-helmet npm...

EUVD-2025-120220

Malicious code in xerxes-nodemon-test-loopback npm...

EUVD-2025-113988

Malicious code in equinox-hapi-perseus-nodemon npm...

EUVD-2025-120082

Malicious code in zenith-fornax-nodemon-blitz npm...

EUVD-2025-120656

Malicious code in warp-nodemon-spectron-rest npm...

EUVD-2025-124042

Malicious code in ora-dotenv-safe-nodemon-postgres npm...

Malicious code in cross-env-nodemon-sedna-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7316b299b527b2a7aca15f930a3fdfb9a75ba8c6418bd1cf9278ef08797cd08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114820

Malicious code in csrf-meissa-nodemon-neptune npm...

EUVD-2025-120414

Malicious code in winston-nodemon-electron-builder-rest npm...

Malicious code in tool-nodemon-hexo-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aa746e12f6bbdc079d7d6d228cbf3b02d40db2940f0c331a16a721ac453d99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-miranda-rollup-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820c175b0702fa017ab87ec0bca09c1c7eb09bf223bbc7cd11a4cec271b1ff02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-scorpius-ignite-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ef700f7d6a2075e1da4dbf66fee58b1e0dc67dbe69aa622fa2019ecbd4b2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...