EUVD-2025-112904

Malicious code in heka-mini-css-extract-plugin-xenos-prompts npm...

EUVD-2025-111425

Malicious code in markdown-pdf-dagda-equinox-xenos npm...

EUVD-2025-122040

Malicious code in sequelize-update-umbra-xenos npm...

EUVD-2025-122478

Malicious code in rimraf-auth0-style-loader-xenos npm...

EUVD-2025-120241

Malicious code in xenos-style-loader-transport-electron-builder npm...

Malicious code in xenos-framework-semantic-release-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bcfb6a70cc74a7a285327bc1e80fd2bde9efb27de6de8ace88cbb4fd7376aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120255

Malicious code in xenos-framework-semantic-release-query npm...

Malicious code in bellatrix-polaris-resolvers-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83cf514d7bef98542ee626677316d7a5026986b8fefbba0f83799577b78ac3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111221

Malicious code in metalsmith-xenos-spica-elara npm...

EUVD-2025-123531

Malicious code in postcss-loader-commitizen-foundation-xenos npm...

EUVD-2025-120234

Malicious code in xenos-zenobia-postcss-janus npm...

EUVD-2025-124414

Malicious code in node-config-flare-elektra-xenos npm...

EUVD-2025-123398

Malicious code in prettier-stylelint-winston-xenos-capella npm...

EUVD-2025-111577

Malicious code in loop-xenos-config-pegasus npm...

EUVD-2025-120252

Malicious code in xenos-gridsome-start-titan npm...

EUVD-2025-121119

Malicious code in triton-changelog-xenos-chakra-ui npm...

EUVD-2025-116409

Malicious code in auriga-xenos-command-markdownlint npm...

EUVD-2025-114154

Malicious code in elektra-xenos-hyperion-spinner npm...

MAL-2025-149673 Malicious code in xenos-airbnb-quito-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69b73f1b84b812f228d10db72c89f610a6d993790e55508b9dfa9e24ee52e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143025 Malicious code in gravity-got-xenos-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569720695da2349549e200d3557858a4c5638b7ab11fa2c1782e3b7fc1ce2bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...