EUVD-2025-123246

Malicious code in prompts-wasat-charon-cosmiconfig npm...

EUVD-2025-112725

Malicious code in hugo-elektra-quantum-wasat npm...

EUVD-2025-112257

Malicious code in jasmine-less-loader-schema-wasat npm...

EUVD-2025-123015

Malicious code in quantum-loopback-element-ui-wasat npm...

EUVD-2025-123895

Malicious code in pegasus-envconfig-wasat-supervisor npm...

EUVD-2025-120631

Malicious code in wasat-public-commitlint-node-sass npm...

EUVD-2025-113393

Malicious code in frontend-wasat-nodejs-nightwatch npm...

EUVD-2025-124070

Malicious code in ophiuchus-wasat-winston-levels npm...

EUVD-2025-112651

Malicious code in hydra-wasat-venus-ini npm...

EUVD-2025-120638

Malicious code in wasat-iota-juno-node-config npm...

Malicious code in wasat-warp-apollo-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd93a066455a605174fc758b22b8487262f6e9ca5639cd5ee67485076eb00d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120627

Malicious code in wasat-scripts-ariel-jabbah npm...

EUVD-2025-113703

Malicious code in farout-delphinus-wasat-xenos npm...

EUVD-2025-120634

Malicious code in wasat-mui-sadr-nodejs npm...

EUVD-2025-116036

Malicious code in blitz-weywot-wasat-buffer npm...

Malicious code in rest-wasat-standard-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570e7bdadc36f85812f4103f7b3cbbfe742df9bddb1406e6bbccc939b7e62d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120650

Malicious code in wasat-andromeda-phoebe-child-process npm...

EUVD-2025-113484

Malicious code in fornax-izar-wasat-proxima npm...

EUVD-2025-121817

Malicious code in spawn-wasat-kronos-child-process npm...

Malicious code in juno-wasat-npm-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...