EUVD-2025-113072

Malicious code in gridsome-eslint-plugin-neptune-quito npm...

Malicious code in perseus-figures-gemini-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049301f3a87fe026c73459018d72dee3cda74659e23386422463b25f859b71bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-sails-postcss-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc150921682f088a1426ed36fc0f6647fe46145d69038f28d3b158ffd8f1d85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122917

Malicious code in quito-subscription-neptune-ini npm...

EUVD-2025-122933

Malicious code in quito-bellatrix-polaris-foundation npm...

EUVD-2025-122925

Malicious code in quito-loop-scripts-event npm...

EUVD-2025-111599

Malicious code in loglevel-morgan-quito-altair npm...

EUVD-2025-112483

Malicious code in init-quito-farout-non-blocking npm...

EUVD-2025-120253

Malicious code in xenos-gridsome-quito-chakra-ui npm...

EUVD-2025-122932

Malicious code in quito-betelgeuse-ursa-element-ui npm...

Malicious code in helios-quito-chai-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a98afb88dc9b089218583ab017deaeef6d3a9daa28b51136783fe9a8fda4142 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124624

Malicious code in native-quito-venus-semantic-release npm...

EUVD-2025-122930

Malicious code in quito-firebase-supervisor-spinner npm...

EUVD-2025-115086

Malicious code in config-galaxy-rimraf-quito npm...

EUVD-2025-120409

Malicious code in winston-procyon-cosmos-quito npm...

EUVD-2025-112854

Malicious code in helmet-native-quito-capella npm...

EUVD-2025-122918

Malicious code in quito-sequelize-spectron-wezen npm...

EUVD-2025-113871

Malicious code in eslint-plugin-quito-wezen-npm npm...

EUVD-2025-115485

Malicious code in chakra-ui-nodemon-gridsome-quito npm...

Malicious code in quito-phoenix-process-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1b557507e22a34ed6c77ffa39819f688ae4f6a674cf5520022347c6e212560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...