EUVD-2025-123543

Malicious code in postcss-airbnb-query-start npm...

EUVD-2025-122956

Malicious code in query-despina-css-minimizer-webpack-plugin-juno npm...

EUVD-2025-123614

Malicious code in pm2-query-mocha-halley npm...

EUVD-2025-115771

Malicious code in callisto-init-astro-query npm...

Malicious code in chakra-ui-semantic-ui-query-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 772e26511ca75d4e3293ea2926cbb7404b0e62d26f1a7aee402169932f39d916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113821

Malicious code in europa-query-tailwindcss-rollup-plugin npm...

EUVD-2025-122958

Malicious code in query-bellatrix-helmet-spectron-webdriver npm...

EUVD-2025-112511

Malicious code in ini-query-bellatrix-quark npm...

EUVD-2025-112021

Malicious code in jwt-wolf-solis-query npm...

EUVD-2025-112249

Malicious code in jasmine-query-yildun-dynamo npm...

EUVD-2025-120679

Malicious code in vulcan-query-vulcan-venus npm...

EUVD-2025-124462

Malicious code in nightwatch-chai-query-leda npm...

EUVD-2025-111328

Malicious code in meissa-alphard-xanadu-graphql npm...

EUVD-2025-112284

Malicious code in janus-query-lint-staged-celeste npm...

EUVD-2025-115737

Malicious code in canopus-proxima-orbit-query npm...

EUVD-2025-123677

Malicious code in pino-pretty-sirius-query-lynx npm...

EUVD-2025-122943

Malicious code in query-taurus-phoenix-chakra-ui npm...

EUVD-2025-122946

Malicious code in query-release-it-pulsar-nextjs npm...

MAL-2025-146964 Malicious code in query-bellatrix-helmet-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2fcbba4aafcd8739a6c5c1f7fb79638cda46c72a032d077c17689398101f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143033 Malicious code in gridsome-auriga-hugo-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5400b01f0a228464c1b8d83ed4a3fbf00d7d6e8f83f717883a54a3e3fc49282c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...