EUVD-2025-123498

Malicious code in postcss-start-hapi-hexo npm...

EUVD-2025-123410

Malicious code in prettier-stylelint-nashira-start-eslint-config npm...

EUVD-2025-123117

Malicious code in publish-postgres-despina-start npm...

EUVD-2025-123106

Malicious code in publish-start-mui-nova npm...

EUVD-2025-124718

Malicious code in mui-dagda-loopback-start npm...

EUVD-2025-124472

Malicious code in nightmare-start-iota-resolvers npm...

EUVD-2025-124401

Malicious code in node-config-terser-start-morgan npm...

EUVD-2025-124298

Malicious code in non-blocking-start-sequelize-fetch npm...

EUVD-2025-124598

Malicious code in nconf-nodemon-start-postcss npm...

Malicious code in fornax-tailwindcss-start-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8582cad12e6d58be2b1c5f1fff16e754192a62b29892c049e46a0efcba4b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121663

Malicious code in start-avior-node-config-zephyr npm...

EUVD-2025-121985

Malicious code in sirius-chromedriver-cygnus-start npm...

EUVD-2025-114992

Malicious code in cors-carpo-webdriver-mocha-start npm...

EUVD-2025-121654

Malicious code in start-husky-nightwatch-mira npm...

Malicious code in fork-start-node-sass-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38573d99689c86b79d69bf0aab74958277241d2f0c883b63abcc8d803cbd42d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-ursa-nodejs-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593bc23c8976e4718436bc2e85ed27103ac307c4bd87d7308b8a3d041620871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116526

Malicious code in arcturus-start-pegasus-aquarius npm...

Malicious code in commitizen-start-radiant-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86fb0200eb91237b731b34977008855e4d540ee3c1840f3df98357cd0215351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146423 Malicious code in postcss-start-hapi-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf0d50e2bd565e4ec443a3833a88464d43936318833ccf7ee79429465a63bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147636 Malicious code in sails-atlas-achernar-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52caec3f9a9d5a52592f977db9cf92e3dbc550cb0fc4abd3df48b1d76a67c807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...