EUVD-2025-115324

Malicious code in chromedriver-xml-pegasus-changelog npm...

EUVD-2025-113185

Malicious code in global-csrf-xml-package npm...

EUVD-2025-120200

Malicious code in xml-non-blocking-unuk-sirius npm...

EUVD-2025-122551

Malicious code in rest-xml-oberon-eslint npm...

EUVD-2025-124494

Malicious code in nextjs-xml-yaml-fork npm...

EUVD-2025-116234

Malicious code in babel-pegasus-xml-schema npm...

EUVD-2025-124073

Malicious code in ophiuchus-vega-xml-graphql npm...

EUVD-2025-123075

Malicious code in pulsar-xml-nextjs-eleventy npm...

EUVD-2025-121735

Malicious code in spinner-dagda-xml-public npm...

EUVD-2025-114114

Malicious code in eleventy-envconfig-xml-private npm...

Malicious code in babel-pegasus-xml-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c99cfe63d56d39e7c66715a4797bb30032ba8dd6254bdf514d52cf979e3706c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120191

Malicious code in xml-version-rimraf-transport npm...

EUVD-2025-111220

Malicious code in metalsmith-xml-thuban-winston npm...

Malicious code in radiant-vuetify-pulsar-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd5c4b7e2c2de1ea070292038e89f90d1b8687fb1eb1ead236ee6a082436ce7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-perseus-hugo-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc55b3380923a446f1f22ae46d93a9bac5996bffd9c7f77b2435786fad188cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120323

Malicious code in xanadu-resolvers-xml-scripts npm...

EUVD-2025-115793

Malicious code in callback-reveal-md-xml-shelljs npm...

EUVD-2025-116226

Malicious code in babel-xml-config-hyperion npm...

MAL-2025-142232 Malicious code in eslint-plugin-galaxy-xml-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa440b71749d145fde8a670cbb74a95100ff3d22173356b9d0dd9711ff2d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145920 Malicious code in orbit-xml-nightwatch-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a3f62aee87ee36ab9ad55455abe4b9e4f611eec1f01293cd9ecf65ddebba0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...