EUVD-2025-112911

Malicious code in heka-axios-norma-npm npm...

EUVD-2025-113168

Malicious code in global-norma-toml-cypress npm...

EUVD-2025-122446

Malicious code in rocket-phoebe-norma-mui npm...

EUVD-2025-124270

Malicious code in norma-supervisor-epimetheus-aquarius npm...

Malicious code in chai-library-nebula-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51633b5eb10d91cac3ec86fe2365ae8450373b723b5074e954f4a5c87df7bec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120771

Malicious code in virgo-halley-norma-cors npm...

Malicious code in cors-chakra-ui-norma-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6583e3fb97f1c660d5acd6273f78cff0fa61a0737fe5b0b5233e8b582d2659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112961

Malicious code in halley-jupiter-norma-polaris npm...

EUVD-2025-124280

Malicious code in norma-fusion-corvus-postcss-loader npm...

EUVD-2025-124038

Malicious code in ora-europa-tool-norma npm...

EUVD-2025-122391

Malicious code in rollup-proxima-norma-less-loader npm...

EUVD-2025-124275

Malicious code in norma-json-stop-quantum npm...

Malicious code in config-meissa-norma-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692c94f05f479b00cfdffb8008e1a952b1fdc7cc8b7bf1dd3f47df2e1a4beabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-norma-spawn-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9871526da17ffbeb1990534998c1ea3e9b0812ae4bbd2867c1b095eabba085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-xenos-norma-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb2344b956fa9c662f301c31ca881fe491b0221853b2e0871fcd45a7167bf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122308

Malicious code in sagitta-quito-norma-iota npm...

EUVD-2025-124277

Malicious code in norma-iota-superagent-ora npm...

EUVD-2025-120711

Malicious code in vuetify-polaris-jovian-norma npm...

EUVD-2025-122711

Malicious code in relay-virgo-native-norma npm...

MAL-2025-145640 Malicious code in norma-europa-prettier-plugin-markdown-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62937ecac055f4dc6dbffb01f230a4ec1775091b600ee13956ab9c30c835dab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...