Malicious code in xo-ignite-canopus-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0bce8256cc0e9ce5e492f8beca90f5cdb3cd66079b137e9c3bf0ea299205d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-passport-xo-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c244aa0a095f7a8205087c80d788004f74f73da527c4e42c8759dda5f0d3a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112519

Malicious code in ini-middleware-build-xo npm...

EUVD-2025-120181

Malicious code in xo-ignite-canopus-dagda npm...

EUVD-2025-120189

Malicious code in xo-adonis-callisto-spinner npm...

EUVD-2025-122618

Malicious code in request-neptune-meissa-xo npm...

EUVD-2025-120183

Malicious code in xo-electron-builder-passport-dynamo npm...

EUVD-2025-121912

Malicious code in slidev-xanadu-xo-castor npm...

EUVD-2025-115584

Malicious code in centauri-achernar-xo-mui npm...

EUVD-2025-122683

Malicious code in release-it-xo-jekyll-relay npm...

EUVD-2025-114224

Malicious code in elara-perseus-xo-relay npm...

EUVD-2025-120206

Malicious code in xerxes-xo-solis-dactyl npm...

EUVD-2025-123437

Malicious code in prettier-plugin-markdown-hyperion-xo-xanthus npm...

EUVD-2025-114209

Malicious code in electron-builder-galaxy-xo-pavo npm...

EUVD-2025-122569

Malicious code in rest-izar-jest-xo npm...

EUVD-2025-120182

Malicious code in xo-hermes-csv-jekyll npm...

EUVD-2025-112937

Malicious code in hapi-antd-dione-xo npm...

EUVD-2025-124634

Malicious code in nashira-xo-concurrently-slides npm...

MAL-2025-140810 Malicious code in cli-sedna-xo-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea95c52ea49932e465b636027c985528b53c29b37dbe031de9640b0ba8b01cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148896 Malicious code in ultra-graphql-xo-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7fe9788fc5f85a480b8336fcd4cf110708d0c9494d6b9eb531def9a0c2053f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...