EUVD-2025-114966

Malicious code in cors-webdriver-mocha-perseus-subscription npm...

EUVD-2025-116734

Malicious code in altair-subscription-flare-loglevel npm...

EUVD-2025-116639

Malicious code in antd-phoebe-puppeteer-subscription npm...

EUVD-2025-116467

Malicious code in async-pm2-subscription-vuepress npm...

EUVD-2025-115943

Malicious code in buffer-materialize-config-subscription npm...

EUVD-2025-115889

Malicious code in bulma-indus-mui-subscription npm...

EUVD-2025-116829

Malicious code in aldebaran-electron-builder-subscription-testcafe npm...

EUVD-2025-123495

Malicious code in postcss-xanthus-gulp-subscription npm...

EUVD-2025-115795

Malicious code in callback-request-subscription-titan npm...

EUVD-2025-123948

Malicious code in parcel-subscription-aquarius-puppeteer npm...

EUVD-2025-112450

Malicious code in inquirer-subscription-atlas-nestjs npm...

EUVD-2025-113264

Malicious code in gatsby-quark-prettier-stylelint-subscription npm...

EUVD-2025-115845

Malicious code in bunyan-vuetify-apex-subscription npm...

MAL-2025-147005 Malicious code in quito-subscription-neptune-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70002200c66b5b4cc0f28f3f46ad6a34726cb88aae438ffc6a091fe5ed4e7af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141180 Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-xanthus-gulp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc387ce7ccdab7159902519e5efccdb38cb7e21391b157e4e4873a12630de6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120855

Malicious code in ursa-schema-norma-subscription npm...

EUVD-2025-121566

Malicious code in subscription-kinetic-eleventy-cluster npm...

EUVD-2025-124470

Malicious code in nightmare-ursa-non-blocking-subscription npm...

EUVD-2025-121042

Malicious code in ultra-altair-janus-subscription npm...