EUVD-2025-124042

Malicious code in ora-dotenv-safe-nodemon-postgres npm...

EUVD-2025-120414

Malicious code in winston-nodemon-electron-builder-rest npm...

EUVD-2025-124338

Malicious code in nodemon-middleware-non-blocking-eclipse npm...

MAL-2025-142778 Malicious code in gacrux-promise-io-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce9f10a14c1745c69d9c331cdf51b1b0ec57a2bddd319bc8a7b70f61e7ad32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121598

Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar npm...

EUVD-2025-116660

Malicious code in antares-supervisor-kinetic-nodemon npm...

MAL-2025-145586 Malicious code in nodemon-nconf-sadr-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4215f518cf4f67b2a4ca990aca5c7accd321716a0fb582b8f272463bd9d9bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149798 Malicious code in yaml-nodemon-spectron-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89819993aed0670a8dded4f811d832852c1a52c89aca9af1031cc6d0bd7ca03b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113949

Malicious code in eris-auth-fusion-nodemon npm...

MAL-2025-146649 Malicious code in promise-rollup-miranda-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e81746e72d8a1587e17b3860845b2296f7c314699720c015d7dcf8b67504630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-geckodriver-mongodb-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e37566e323528314f2a0a3e9907ee8ce68065ba9a7899cbe3b363638ee7870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123795

Malicious code in phenomic-ceres-uninstall-nodemon npm...

EUVD-2025-120637

Malicious code in wasat-jabbah-nodemon-spawn npm...

Malicious code in tool-nodemon-hexo-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aa746e12f6bbdc079d7d6d228cbf3b02d40db2940f0c331a16a721ac453d99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123327

Malicious code in procyon-html-webpack-plugin-nodemon-phoebe npm...

EUVD-2025-124248

Malicious code in npm-alphard-mongodb-nodemon npm...

EUVD-2025-124336

Malicious code in nodemon-mongoose-middleware-kastra npm...

EUVD-2025-112592

Malicious code in ignite-nodemon-antares-publish npm...

MAL-2025-147656 Malicious code in sails-nodemon-apollo-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c1304784231109d0525930d1103480a1961a3d2e7fcce0f5e2b0de7f553d05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148226 Malicious code in sqlite-event-nodemon-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68018707cd81a7cff1bfc2becc80cda5eb58c8d8c33a490decc2a5785a14804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...