EUVD-2025-121218

Malicious code in toml-flare-shelljs-subscription npm...

EUVD-2025-111745

Malicious code in levels-yaml-build-shelljs npm...

EUVD-2025-122015

Malicious code in shelljs-ariel-ophiuchus-sails npm...

EUVD-2025-116203

Malicious code in backend-yildun-fornax-shelljs npm...

EUVD-2025-111607

Malicious code in loglevel-hydra-lyra-shelljs npm...

EUVD-2025-111441

Malicious code in magellan-webdriverio-shelljs-inquirer npm...

EUVD-2025-111258

Malicious code in mensa-passport-module-shelljs npm...

EUVD-2025-111231

Malicious code in metalsmith-nashira-antares-shelljs npm...

EUVD-2025-111179

Malicious code in meteor-shelljs-miranda-oauth npm...

EUVD-2025-112618

Malicious code in hyperion-pino-pretty-levels-shelljs npm...

EUVD-2025-112469

Malicious code in inquirer-cosmos-sqlite-shelljs npm...

Malicious code in backend-yildun-fornax-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a40d1de5b24dbb448475870ce97fffe04c4ed911b649262851e279fd42ab9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-colors-auth0-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ba7f415d5cb37f209299599f124041b0707adad331912f2dfd0d7ca5470e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-ariel-ophiuchus-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693053840c257ad600fff44f093b29ccfea20e6067e1597aaf6f8e47ebdb03ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-chai-remark-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bf01b624bd21b9a8a7cc6878f307cb778c3422e7632f710831cf26d0364bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-csv-antares-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e0289f23944cbef7e11f6498fa51536ecbbbd7d2ea016eb28509e35c602277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shelljs-sagitta-forever-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520a636888d2b5c6bf4dc6d1cfb48b131a6cb2490a7d3d5ada301ab554f0e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122004

Malicious code in shelljs-luna-sadr-wezen npm...

Malicious code in delphinus-ariel-apex-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b947a9067e09e6ea0296b684556baf143d2ae93eb8a8041dc79efe79f7e54ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123109

Malicious code in publish-shelljs-hexo-css-loader npm...