EUVD-2025-122930

Malicious code in quito-firebase-supervisor-spinner npm...

EUVD-2025-112261

Malicious code in jasmine-fomalhaut-changelog-supervisor npm...

EUVD-2025-123152

Malicious code in public-supervisor-semantic-release-rate-limiter npm...

EUVD-2025-115778

Malicious code in callisto-cygnus-supervisor-blitz npm...

EUVD-2025-121537

Malicious code in supervisor-callback-xo-gridsome npm...

EUVD-2025-113700

Malicious code in farout-draco-supervisor-chai npm...

EUVD-2025-121534

Malicious code in supervisor-hyperion-elektra-yonder npm...

EUVD-2025-121520

Malicious code in supervisor-ultra-rate-limiter-mira npm...

EUVD-2025-122697

Malicious code in release-it-meteor-dorado-supervisor npm...

EUVD-2025-121536

Malicious code in supervisor-centauri-aether-link npm...

EUVD-2025-124459

Malicious code in nightwatch-cz-conventional-changelog-pulsar-supervisor npm...

Malicious code in supervisor-centauri-aether-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a19158ab0964c26c031c48bf99bc4fe2f208abf9dfe80b638f260dd235aacc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-supervisor-cors-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09634c7b521e145575c5a46514ec820c83b1564003fa688b91a1cbaf98120915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121527

Malicious code in supervisor-pm2-phoebe-jsonp npm...

EUVD-2025-122323

Malicious code in sagitta-indus-supervisor-non-blocking npm...

EUVD-2025-113783

Malicious code in event-supervisor-eslint-config-tethys npm...

EUVD-2025-121532

Malicious code in supervisor-koa-carpo-hugo npm...

Malicious code in meissa-supervisor-markdown-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60cdc4d5317b650a261573ff13fe8a451e6e91f68730697fa7045ac908f307e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143852 Malicious code in jasmine-fomalhaut-changelog-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa38a95490450c4b15fd8fc796ac0472049559c3449ac79dbe54b1e6a3e178f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147623 Malicious code in sagitta-supervisor-publish-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de9a0ddb3ac825b2c032dd952456a12fa1dd6793f53dcdfedbc6229196f808c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...