EUVD-2025-120514

Malicious code in webpack-zenith-winston-changelog npm...

EUVD-2025-120445

Malicious code in winston-changelog-dotenv-parse-variables-parcel npm...

EUVD-2025-120446

Malicious code in winston-changelog-cygnus-prompts npm...

MAL-2025-149484 Malicious code in winston-changelog-cygnus-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60b88130d8ae31195152a9e0bfae2ba8966159706a17f71bd595bec96eee77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...