EUVD-2025-120446

Malicious code in winston-changelog-cygnus-prompts npm...

EUVD-2025-121230

Malicious code in titan-winston-commitlint-config-angular-elara npm...

EUVD-2025-111357

Malicious code in materialize-winston-rate-limiter-webdriver-mocha npm...

Malicious code in winston-gatsby-zenobia-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4539e20771a5e14a396382185985a89fdd823182f16cf3fe399f24140d7e8c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123020

Malicious code in quantum-ganymede-gravity-winston npm...

EUVD-2025-120432

Malicious code in winston-init-public-prompts npm...

EUVD-2025-116600

Malicious code in apollo-cordelia-winston-mongodb npm...

EUVD-2025-120430

Malicious code in winston-izar-winston-thuban npm...

EUVD-2025-124215

Malicious code in nuxtjs-helmet-winston-registry npm...

EUVD-2025-120440

Malicious code in winston-element-ui-chakra-ui-pino-pretty npm...

MAL-2025-145546 Malicious code in node-sass-loglevel-stop-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7535b8bc3308fea5d62aa18a1d257a3e693dea8b423fcfeac5e9ae315d78a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149527 Malicious code in winston-sirius-lynx-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3250323d484e817f69507a804d6b0379ef2de404ac143263edc581d1201620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148308 Malicious code in stop-winston-bulma-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e6a3b48b1fa6a57f7a149b87c21c622de6c043358cb99a7e0448970c1f9783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144529 Malicious code in loop-mensa-xml-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588fd6e066e2dd3092837d1df974d64a5ad7b55e0b95e3888d7853b746fbb1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149484 Malicious code in winston-changelog-cygnus-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60b88130d8ae31195152a9e0bfae2ba8966159706a17f71bd595bec96eee77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115958

Malicious code in browserify-winston-yaml-react-bootstrap npm...

EUVD-2025-111496

Malicious code in lyra-winston-nightwatch-antd npm...

MAL-2025-140354 Malicious code in callisto-winston-socketio-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc61cda68c18f9ee8fdafde47a595f3676d0480aa45bc379dd3acb84c0592d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-nightwatch-sagitta-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da665bbaad7488248480eb32e269a4365ff5d2185af8c41490d02639d46dc5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145655 Malicious code in nova-configstore-envconfig-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ce7ba149dfab81053af19e5fda3cd4e6ef2373a58b40e024f4b6e06cd32a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...