Malicious code in non-blocking-dotenv-safe-got-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ec042cfe2b369dc9c550415ab4881c8b222e5b9e1b1ffd6d863083eed4048b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124290

Malicious code in non-blocking-writable-soap-element-ui npm...

EUVD-2025-113370

Malicious code in fusion-non-blocking-hugo-commitlint npm...

EUVD-2025-124289

Malicious code in non-blocking-xml-procyon-callback npm...

EUVD-2025-114464

Malicious code in dione-leda-meissa-non-blocking npm...

EUVD-2025-120502

Malicious code in websockets-solis-eslint-plugin-non-blocking npm...

EUVD-2025-124338

Malicious code in nodemon-middleware-non-blocking-eclipse npm...

EUVD-2025-124292

Malicious code in non-blocking-ursa-postgres-cygnus npm...

Malicious code in sagitta-superagent-non-blocking-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8ddc615a56e7e150a01de9f37fb83d259b5816386456335a484c9eaeb10f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124475

Malicious code in nightmare-run-script-cosmiconfig-non-blocking npm...

EUVD-2025-123291

Malicious code in promise-aether-private-non-blocking npm...

EUVD-2025-120704

Malicious code in vulcan-browserify-non-blocking-relay npm...

EUVD-2025-123313

Malicious code in procyon-non-blocking-mongoose-version npm...

EUVD-2025-120937

Malicious code in update-chai-non-blocking-jwt npm...

EUVD-2025-124301

Malicious code in non-blocking-sass-loader-celeste-norma npm...

EUVD-2025-120396

Malicious code in winston-wasat-gacrux-non-blocking npm...

EUVD-2025-121693

Malicious code in sqlite-non-blocking-native-kastra npm...

EUVD-2025-124303

Malicious code in non-blocking-phoenix-figures-algol npm...

EUVD-2025-115700

Malicious code in carina-docusaurus-non-blocking-rigel npm...

MAL-2025-145621 Malicious code in non-blocking-sqlite-comet-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4565c829ba2e5b0b1cab2a792e2ee7ab03d4a61f041503d12bef51bd72b837f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...