EUVD-2025-179585

Malicious code in convict-private-cors-superagent npm...

EUVD-2025-178891

Malicious code in firebase-indus-biogeochemistry-superagent npm...

EUVD-2025-179815

Malicious code in centaurus-superagent-spinner-leda npm...

EUVD-2025-176092

Malicious code in supervisor-winston-superagent-exosphere npm...

EUVD-2025-177689

Malicious code in nconf-superagent-public-writable npm...

EUVD-2025-176130

Malicious code in superagent-zephyr-technosignature-passport npm...

EUVD-2025-177483

Malicious code in odin-lepton-superagent-uninstall npm...

EUVD-2025-177679

Malicious code in nebula-fomalhaut-auriga-superagent npm...

EUVD-2025-178006

Malicious code in luminescence-pino-superagent-axios npm...

EUVD-2025-177691

Malicious code in nconf-markdownlint-archaeometry-superagent npm...

EUVD-2025-176566

Malicious code in sadr-technocracy-superagent-terser-webpack-plugin npm...

EUVD-2025-178065

Malicious code in lint-staged-superagent-eridanus-bionics npm...

EUVD-2025-176917

Malicious code in publish-superagent-rollup-plugin-commitlint npm...

Malicious code in centaurus-superagent-spinner-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d406ed50d97258b1c60ee835ae0350d359b3f8576bc1a5411d4da722d37cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176133

Malicious code in superagent-quasar-exoplanetology-areology npm...

EUVD-2025-176137

Malicious code in superagent-loglevel-stop-rest npm...

EUVD-2025-177044

Malicious code in process-callisto-superagent-quark npm...

EUVD-2025-176131

Malicious code in superagent-spica-thermochronology-node-sass npm...

EUVD-2025-178699

Malicious code in global-outercore-superagent-draco npm...

Malicious code in superagent-loglevel-stop-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a6c222ed3fc6b5b431b69951f4f3dec5dc9dc593bbde310b59367cb4130c446 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...