EUVD-2025-123931

Malicious code in pavo-antares-run-script-lyra npm...

EUVD-2025-124803

Malicious code in module-run-script-telesto-writable npm...

EUVD-2025-124368

Malicious code in node-sass-run-script-chariklo-uninstall npm...

EUVD-2025-120716

Malicious code in vuetify-loop-convict-run-script npm...

EUVD-2025-122817

Malicious code in redis-izar-react-bootstrap-run-script npm...

MAL-2025-141364 Malicious code in cygnus-cache-magellan-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871df337f77dbbb8e35ff5cf417b96faddccf076a47434e71e0ee1943d2ab16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-ophiuchus-antares-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1029ceb8cde15110cf4088fc5abf83c8ab1b9dc7c09f0ee072aecf0241750f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124196

Malicious code in oauth-corvus-atlas-run-script npm...

EUVD-2025-111251

Malicious code in mensa-run-script-got-lyra npm...

EUVD-2025-116712

Malicious code in antares-antares-run-script-triton npm...

Malicious code in markdownlint-standard-run-script-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c922258173b565aad147f7ab8c8f6e2bd3797075453bb4b7d65c9e6481e66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111385

Malicious code in markdownlint-standard-run-script-comet npm...

MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111772

Malicious code in less-non-blocking-run-script-xanthus npm...

EUVD-2025-111618

Malicious code in local-run-script-ophiuchus-global npm...

EUVD-2025-111595

Malicious code in loglevel-run-script-cross-env-superagent npm...

EUVD-2025-112556

Malicious code in indus-auth-run-script-capella npm...

EUVD-2025-111982

Malicious code in kastra-run-script-firebase-blaze npm...

EUVD-2025-111933

Malicious code in kinetic-ophiuchus-antares-run-script npm...

Malicious code in callback-run-script-html-webpack-plugin-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a3cc4cd04277d76318a794fe020a7ea9edc9d4d5148a26b7f40fcbf27f72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...