EUVD-2025-123845

Malicious code in perseus-cluster-betelgeuse-quito npm...

EUVD-2025-116322

Malicious code in avior-quantum-quito-enceladus npm...

EUVD-2025-121072

Malicious code in typeorm-quito-kronos-toml npm...

Malicious code in husky-quito-electron-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8537ea6cd46b2fb0b9e192dddb173edc80c3c0f12cd7f312f1f3eef1d4ff4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112051

Malicious code in jupiter-quito-library-slidev npm...

EUVD-2025-122934

Malicious code in quito-barnard-selenium-nova npm...

EUVD-2025-122308

Malicious code in sagitta-quito-norma-iota npm...

EUVD-2025-112248

Malicious code in jasmine-quito-lint-vulcan npm...

EUVD-2025-112872

Malicious code in helios-quito-chai-commitizen npm...

EUVD-2025-114194

Malicious code in electron-fornax-quito-mensa npm...

EUVD-2025-116763

Malicious code in alphard-quito-jsonp-europa npm...

EUVD-2025-114283

Malicious code in dynamo-express-quito-avior npm...

EUVD-2025-122919

Malicious code in quito-sequelize-process-promise npm...

EUVD-2025-123924

Malicious code in pavo-eleventy-aquarius-quito npm...

Malicious code in quito-weywot-luna-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553ceec3ac576ddec9ed187938294d3c065df78d858b4d90d754cef14994614e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122871

Malicious code in react-bootstrap-auth0-quito-sedna npm...

EUVD-2025-122713

Malicious code in relay-sails-postcss-quito npm...

EUVD-2025-113465

Malicious code in fornax-pulsar-phenomic-quito npm...

EUVD-2025-122916

Malicious code in quito-superagent-juno-css-loader npm...

Malicious code in ora-kastra-fomalhaut-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68eef0a934d73d0ead1f154332245499d61fc033a2baefceef76b244aca28fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...