EUVD-2025-175488

Malicious code in xerxes-paleontology-dorado-pavo npm...

EUVD-2025-179037

Malicious code in eslint-plugin-husky-pavo-virgo npm...

EUVD-2025-177722

Malicious code in mysql-fork-pavo-firebase npm...

Malicious code in foundation-await-pavo-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c032862fc81e78c2d89207df7e5c2e61ea1a07ef25158a271798bbb53ecb4610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-colors-taurus-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4822eb2e312a8df244e9a3d06ff9c91bcb9d9f9cf6fdc56dedac94c979d42c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177291

Malicious code in pavo-xenon-markdownlint-enceladus npm...

EUVD-2025-177295

Malicious code in pavo-colors-taurus-eslint-plugin npm...

EUVD-2025-180474

Malicious code in aldebaran-biosignature-darkenergy-pavo npm...

EUVD-2025-176119

Malicious code in superflare-paleoclimatology-pavo-lacerta npm...

EUVD-2025-176629

Malicious code in rimraf-middleware-mysql-pavo npm...

EUVD-2025-176005

Malicious code in terser-webpack-plugin-andromeda-zenobia-pavo npm...

EUVD-2025-177825

Malicious code in mira-flare-xanadu-pavo npm...

EUVD-2025-180475

Malicious code in airbnb-titan-pavo-adonis npm...

EUVD-2025-177294

Malicious code in pavo-hapi-hyperion-rollup-plugin npm...

EUVD-2025-177293

Malicious code in pavo-helmet-titan-kinetic npm...

EUVD-2025-178425

Malicious code in indus-cybernetics-prettier-plugin-markdown-pavo npm...

EUVD-2025-177296

Malicious code in pavo-auth-sedna-polaris npm...

EUVD-2025-177297

Malicious code in pavo-auriga-jest-apollo npm...

EUVD-2025-180266

Malicious code in async-iota-pavo-quasar npm...

Malicious code in pavo-hapi-hyperion-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47751cb87177ae728651660085900b0615c3a7eb42d490ffb25a15ae74a4b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...