Malicious code in thuban-run-script-callback-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8cab59643f284802fbb4cbd2c8e1b457e20dcfeb60ba0e2de324276c9adc97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122378

Malicious code in run-script-got-cross-env-yaml npm...

Malicious code in got-run-script-proxima-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa04a34a8e56c5c772f14564f419592876e974653aa8279f0dfc3c83c0256b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122384

Malicious code in run-script-await-ini-ariel npm...

EUVD-2025-121596

Malicious code in stream-run-script-got-morgan npm...

EUVD-2025-111251

Malicious code in mensa-run-script-got-lyra npm...

EUVD-2025-115110

Malicious code in commitlint-zenobia-run-script-superagent npm...

EUVD-2025-123931

Malicious code in pavo-antares-run-script-lyra npm...

EUVD-2025-124196

Malicious code in oauth-corvus-atlas-run-script npm...

EUVD-2025-122817

Malicious code in redis-izar-react-bootstrap-run-script npm...

EUVD-2025-122383

Malicious code in run-script-bulma-jupiter-magellan npm...

EUVD-2025-124475

Malicious code in nightmare-run-script-cosmiconfig-non-blocking npm...

Malicious code in run-script-nconf-hermes-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ef6b1061299d5a40c1afa8a79be5c0c34df15a6f6cb207fc51e33fec9000cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111385

Malicious code in markdownlint-standard-run-script-comet npm...

EUVD-2025-120716

Malicious code in vuetify-loop-convict-run-script npm...

EUVD-2025-122375

Malicious code in run-script-metalsmith-init-commitlint-config-angular npm...

EUVD-2025-123078

Malicious code in pulsar-run-script-redis-convict npm...

EUVD-2025-113516

Malicious code in fork-run-script-json-bootstrap npm...

EUVD-2025-122739

Malicious code in rehype-run-script-soap-process npm...

Malicious code in dynamo-run-script-nashira-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7361ddf24b24372d3f7d805c9eb58615f9f41cd1281ea692b6ebc64d1b3c543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...