EUVD-2025-120720

Malicious code in vuetify-fork-xml-cache npm...

EUVD-2025-124316

Malicious code in non-blocking-colors-xml-callisto npm...

EUVD-2025-113009

Malicious code in grus-taurus-xml-kinetic npm...

EUVD-2025-120198

Malicious code in xml-phoebe-cosmos-sadr npm...

EUVD-2025-114129

Malicious code in element-ui-radiant-procyon-xml npm...

EUVD-2025-113501

Malicious code in fornax-chakra-ui-wasat-xml npm...

EUVD-2025-120201

Malicious code in xml-mocha-restart-semantic-release npm...

EUVD-2025-124622

Malicious code in native-terser-polaris-xml npm...

EUVD-2025-120194

Malicious code in xml-triton-flare-auth0 npm...

EUVD-2025-116569

Malicious code in aquarius-adonis-vuetify-xml npm...

EUVD-2025-124407

Malicious code in node-config-leda-test-xml npm...

EUVD-2025-120089

Malicious code in yonder-resolvers-xml-uninstall npm...

EUVD-2025-124799

Malicious code in module-xml-meteor-meissa npm...

EUVD-2025-120204

Malicious code in xml-aether-eleventy-apollo npm...

EUVD-2025-123423

Malicious code in prettier-plugin-markdown-xml-ursa-magellan npm...

Malicious code in yonder-resolvers-xml-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 998246d583d234c05dbda2d020476c69c2170bdc801daeb0155d6fb4b69d2387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-despina-async-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7945446fa469f4ab212c7c15865d5e21bc2ebbaf53d61f9368e81a8b86fbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120199

Malicious code in xml-perseus-hugo-eslint-config npm...

EUVD-2025-112679

Malicious code in husky-xml-kastra-await npm...

Malicious code in eslint-plugin-galaxy-xml-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa440b71749d145fde8a670cbb74a95100ff3d22173356b9d0dd9711ff2d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...