MAL-2025-140623 Malicious code in chakra-ui-nodemon-metalsmith-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fd1864b9a5129d2c4228d9955e4d3dc9c799a3aa1f4b18ba2932dd5c4fcdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122217

Malicious code in scorpius-chariklo-nextjs-nodemon npm...

EUVD-2025-124332

Malicious code in nodemon-odin-yildun-bunyan npm...

EUVD-2025-121972

Malicious code in sirius-gatsby-subscription-nodemon npm...

EUVD-2025-124341

Malicious code in nodemon-europa-apollo-markdown npm...

MAL-2025-145588 Malicious code in nodemon-node-config-writable-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a645b9fd9876fc339f13eaa5d63fc1e9f3c191f707405651a572c7a8da38a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142161 Malicious code in eris-auth-fusion-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c74e6c4177a2be27c16708c819a8e4889de935df4620a23f9b07e19498a0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview nodemon-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

MAL-2025-48263 Malicious code in nodemon-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc5fe7289f6c5b97c4b2497e93d57d3636f6da1242e0f9d36bd0211a326f344 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-33627

Malicious code in nodemon-pkg npm...

Malicious code in nodemon-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc5fe7289f6c5b97c4b2497e93d57d3636f6da1242e0f9d36bd0211a326f344 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodemon-cli-umbriel-uranology (npm)

The package nodemon-cli-umbriel-uranology was found to contain malicious code...

MAL-2025-45253 Malicious code in mutation-nodemon-semantic-release-barnard (npm)

The package mutation-nodemon-semantic-release-barnard was found to contain malicious code...

Malicious code in transport-nodemon-proxima-colors (npm)

The package transport-nodemon-proxima-colors was found to contain malicious code...

Malicious code in kronos-hexo-nodemon-firebase (npm)

The package kronos-hexo-nodemon-firebase was found to contain malicious code...

Malicious code in spectron-mui-nodemon-parsec (npm)

The package spectron-mui-nodemon-parsec was found to contain malicious code...

MAL-2025-44901 Malicious code in kronos-hexo-nodemon-firebase (npm)

The package kronos-hexo-nodemon-firebase was found to contain malicious code...

MAL-2025-46373 Malicious code in transport-nodemon-proxima-colors (npm)

The package transport-nodemon-proxima-colors was found to contain malicious code...

MAL-2025-46123 Malicious code in spectron-mui-nodemon-parsec (npm)

The package spectron-mui-nodemon-parsec was found to contain malicious code...

Malicious code in mutation-nodemon-semantic-release-barnard (npm)

The package mutation-nodemon-semantic-release-barnard was found to contain malicious code...