EUVD-2025-121216

Malicious code in toml-hyperion-meissa-kinetic npm...

EUVD-2025-120570

Malicious code in webdriver-mocha-nightwatch-materialize-toml npm...

EUVD-2025-121218

Malicious code in toml-flare-shelljs-subscription npm...

EUVD-2025-115329

Malicious code in chromedriver-metalsmith-toml-nightwatch npm...

EUVD-2025-116174

Malicious code in bellatrix-centaurus-toml-firebase npm...

EUVD-2025-122081

Malicious code in semantic-ui-concurrently-enceladus-toml npm...

EUVD-2025-116423

Malicious code in auriga-install-express-toml npm...

EUVD-2025-124814

Malicious code in module-frontend-toml-tool npm...

EUVD-2025-113534

Malicious code in forever-webpack-toml-rest npm...

EUVD-2025-124299

Malicious code in non-blocking-sqlite-toml-xo npm...

MAL-2025-140093 Malicious code in bootes-toml-non-blocking-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32250d5fdfe61a98e4d4cee9e2c18bd20f478a645751fa2a65929da0c6646063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145751 Malicious code in oberon-passport-toml-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f7557dd8b6de4242569f5a8fffd43e5fc5d782c730a95e3d071fe130de8102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121224

Malicious code in toml-commitizen-mocha-epimetheus npm...

EUVD-2025-114019

Malicious code in epimetheus-betelgeuse-toml-node-config npm...

EUVD-2025-121072

Malicious code in typeorm-quito-kronos-toml npm...

EUVD-2025-122941

Malicious code in query-toml-mongodb-alphard npm...

EUVD-2025-122983

Malicious code in quark-toml-iota-nashira npm...

Malicious code in subscription-octans-toml-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7502f2a664297099ddcd766a544f97f3b53507614a99839cbf6eb44527def5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116445

Malicious code in atlas-rest-quantum-toml npm...

EUVD-2025-112782

Malicious code in hermes-testcafe-toml-nextjs npm...