EUVD-2025-122370

Malicious code in run-script-testcafe-astro-ursa npm...

EUVD-2025-122369

Malicious code in run-script-testcafe-leda-update npm...

EUVD-2025-122367

Malicious code in run-script-vuepress-bootes-enceladus npm...

EUVD-2025-123906

Malicious code in pavo-zenobia-forever-run-script npm...

EUVD-2025-123744

Malicious code in phoebe-run-script-subscription-karma npm...

EUVD-2025-123078

Malicious code in pulsar-run-script-redis-convict npm...

EUVD-2025-124550

Malicious code in neptune-nuxtjs-axios-run-script npm...

EUVD-2025-124475

Malicious code in nightmare-run-script-cosmiconfig-non-blocking npm...

EUVD-2025-124120

Malicious code in odin-run-script-scripts-bootstrap npm...

EUVD-2025-123931

Malicious code in pavo-antares-run-script-lyra npm...

EUVD-2025-124803

Malicious code in module-run-script-telesto-writable npm...

EUVD-2025-124368

Malicious code in node-sass-run-script-chariklo-uninstall npm...

EUVD-2025-120716

Malicious code in vuetify-loop-convict-run-script npm...

EUVD-2025-122817

Malicious code in redis-izar-react-bootstrap-run-script npm...

MAL-2025-141836 Malicious code in dynamo-run-script-nashira-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7361ddf24b24372d3f7d805c9eb58615f9f41cd1281ea692b6ebc64d1b3c543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-ophiuchus-antares-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1029ceb8cde15110cf4088fc5abf83c8ab1b9dc7c09f0ee072aecf0241750f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124196

Malicious code in oauth-corvus-atlas-run-script npm...

EUVD-2025-111251

Malicious code in mensa-run-script-got-lyra npm...

EUVD-2025-116712

Malicious code in antares-antares-run-script-triton npm...

Malicious code in markdownlint-standard-run-script-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c922258173b565aad147f7ab8c8f6e2bd3797075453bb4b7d65c9e6481e66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...