EUVD-2025-116267

Malicious code in axios-non-blocking-concurrently-semantic-ui npm...

EUVD-2025-113986

Malicious code in equinox-iota-scorpius-non-blocking npm...

EUVD-2025-124295

Malicious code in non-blocking-subscription-phoebe-hydra npm...

EUVD-2025-115668

Malicious code in carpo-elara-non-blocking-upgrade npm...

EUVD-2025-124220

Malicious code in nuxtjs-command-magellan-non-blocking npm...

EUVD-2025-121563

Malicious code in subscription-non-blocking-auth0-wolf npm...

Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115003

Malicious code in cordelia-non-blocking-local-sequelize npm...

EUVD-2025-111698

Malicious code in link-non-blocking-query-canopus npm...

EUVD-2025-120079

Malicious code in zenith-iota-sedna-non-blocking npm...

EUVD-2025-124298

Malicious code in non-blocking-start-sequelize-fetch npm...

EUVD-2025-124313

Malicious code in non-blocking-dotenv-safe-got-castor npm...

EUVD-2025-115240

Malicious code in colors-xenon-non-blocking-capella npm...

EUVD-2025-124311

Malicious code in non-blocking-hapi-less-package npm...

EUVD-2025-124308

Malicious code in non-blocking-lacerta-halley-dependencies npm...

EUVD-2025-124316

Malicious code in non-blocking-colors-xml-callisto npm...

EUVD-2025-124310

Malicious code in non-blocking-html-webpack-plugin-exec-epimetheus npm...

EUVD-2025-123318

Malicious code in procyon-materialize-non-blocking-sqlite npm...

EUVD-2025-114794

Malicious code in css-loader-reveal-md-non-blocking-nightwatch npm...

Malicious code in tethys-non-blocking-hexo-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...