EUVD-2025-120269

Malicious code in xenon-shelljs-chariklo-loglevel npm...

EUVD-2025-121179

Malicious code in tool-proxima-shelljs-corvus npm...

EUVD-2025-113718

Malicious code in express-titan-andromeda-shelljs npm...

EUVD-2025-122666

Malicious code in remark-shelljs-phoenix-sedna npm...

EUVD-2025-123110

Malicious code in publish-schema-scorpius-shelljs npm...

EUVD-2025-113817

Malicious code in europa-start-shelljs-chromedriver npm...

EUVD-2025-113163

Malicious code in global-shelljs-socketio-passport npm...

Malicious code in quark-colors-auth0-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ba7f415d5cb37f209299599f124041b0707adad331912f2dfd0d7ca5470e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112469

Malicious code in inquirer-cosmos-sqlite-shelljs npm...

EUVD-2025-122016

Malicious code in shelljs-airbnb-morgan-protractor npm...

EUVD-2025-122879

Malicious code in rate-limiter-lynx-shelljs-gulp npm...

Malicious code in shelljs-chai-remark-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bf01b624bd21b9a8a7cc6878f307cb778c3422e7632f710831cf26d0364bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124456

Malicious code in nightwatch-element-ui-wezen-shelljs npm...

EUVD-2025-114789

Malicious code in css-minimizer-webpack-plugin-babel-shelljs-convict npm...

EUVD-2025-116203

Malicious code in backend-yildun-fornax-shelljs npm...

EUVD-2025-124010

Malicious code in orbit-pegasus-sync-shelljs npm...

EUVD-2025-124573

Malicious code in nebula-meissa-shelljs-local npm...

EUVD-2025-115682

Malicious code in carina-rocket-shelljs-rimraf npm...

MAL-2025-139199 Malicious code in achernar-hexo-betelgeuse-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22485d24156f5b7a844676474ff062663cacf70de836551462b306a1bc5dddbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143644 Malicious code in inquirer-cosmos-sqlite-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bc7f48dbc1cbcc3b88ab693e3d514765eb32df9b7bd5a8c673dbe9e7371df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...