EUVD-2025-122828

Malicious code in readable-xanadu-zenobia-css-minimizer-webpack-plugin npm...

EUVD-2025-113197

Malicious code in gemini-relay-readable-sadr npm...

EUVD-2025-114881

Malicious code in cressida-cygnus-commitlint-config-angular-readable npm...

EUVD-2025-122836

Malicious code in readable-nodemon-envconfig-fomalhaut npm...

EUVD-2025-115757

Malicious code in callisto-readable-europa-pegasus npm...

EUVD-2025-111801

Malicious code in less-json-sync-readable npm...

EUVD-2025-111554

Malicious code in loopback-readable-meissa-miranda npm...

EUVD-2025-111369

Malicious code in materialize-materialize-mini-css-extract-plugin-readable npm...

EUVD-2025-111187

Malicious code in meteor-readable-dactyl-chalk npm...

EUVD-2025-111186

Malicious code in meteor-readable-norma-native npm...

EUVD-2025-112443

Malicious code in install-build-readable-gacrux npm...

EUVD-2025-112224

Malicious code in javascript-readable-fetch-nconf npm...

EUVD-2025-112029

Malicious code in jwt-readable-registry-soap npm...

EUVD-2025-111965

Malicious code in kaus-local-readable-csv npm...

Malicious code in buffer-readable-geckodriver-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b954e06170c9954928e475e5e6c4b220edc4af31fa80dd5b75c4475ce0c0f9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-testcafe-readable-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8ee62a61e56cdffe10f030dcf9491a98d3219334ff1c007935f2c37dad4045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-readable-thuban-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbee7af91fc32c148f8c4a3e601df8ffa2dcc65f0b9e8a59b9b012f3e6ae5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-relay-readable-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6153588fa07b05da227571629362574876da36eef3b7b257efd00bf9adc0f53e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-chakra-ui-mensa-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c41dcb2039948b5b1d3b95f09151efa9edd50c427aa1fcc052a6de060068f44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in readable-sqlite-lint-staged-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1e86395f72b0d1c4ca3d9c82e00d107b76b89cc287e27a646f1d01fa40c79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...