EUVD-2025-124203

Malicious code in nuxtjs-uglify-js-loopback-comet npm...

EUVD-2025-115930

Malicious code in buffer-stop-dynamo-docusaurus npm...

EUVD-2025-121526

Malicious code in supervisor-publish-cosmos-tethys npm...

EUVD-2025-121386

Malicious code in terser-webpack-plugin-airbnb-test-node-sass npm...

EUVD-2025-111819

Malicious code in leda-sequelize-pm2-sagitta npm...

EUVD-2025-115554

Malicious code in centaurus-scripts-gulp-terser-webpack-plugin npm...

EUVD-2025-112125

Malicious code in jsonp-barnard-wolf-thuban npm...

EUVD-2025-113672

Malicious code in fetch-corvus-auth-charon npm...

MAL-2025-147586 Malicious code in sagitta-chariklo-neptune-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5567eaf05d0f398650b7487da7dc6b9f7140514798f1542595b71d792c39c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122067

Malicious code in semantic-ui-schema-kastra-bulma npm...

EUVD-2025-111487

Malicious code in magellan-concurrently-markdown-less npm...

EUVD-2025-122207

Malicious code in scorpius-scripts-flare-gatsby npm...

EUVD-2025-122749

Malicious code in rehype-impulse-webdriverio-auth npm...

EUVD-2025-124414

Malicious code in node-config-flare-elektra-xenos npm...

EUVD-2025-120551

Malicious code in webdriverio-nightwatch-sequelize-global npm...

EUVD-2025-120721

Malicious code in vuetify-europa-rollup-cygnus npm...

EUVD-2025-120255

Malicious code in xenos-framework-semantic-release-query npm...

EUVD-2025-122871

Malicious code in react-bootstrap-auth0-quito-sedna npm...

EUVD-2025-115919

Malicious code in build-loopback-transform-publish npm...

EUVD-2025-113823

Malicious code in europa-prompts-markdown-hugo npm...