EUVD-2025-175473

Malicious code in xo-csrf-radiant-halley npm...

EUVD-2025-178527

Malicious code in hexo-publish-hexo-xo npm...

EUVD-2025-175466

Malicious code in xo-nightmare-magellan-eslint-plugin npm...

EUVD-2025-175469

Malicious code in xo-koa-metalsmith-perseus npm...

EUVD-2025-179675

Malicious code in colors-request-xo-xerxes npm...

EUVD-2025-178988

Malicious code in exec-zephyr-xo-izar npm...

EUVD-2025-177406

Malicious code in orogeny-algol-kastra-xo npm...

EUVD-2025-175467

Malicious code in xo-morgan-css-loader-prompts npm...

EUVD-2025-175692

Malicious code in volcanology-yakutsk-phenomic-xo npm...

EUVD-2025-177273

Malicious code in pegasus-xo-charon-karma npm...

MAL-2025-190369 Malicious code in xenon-comet-xo-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052d305986eaac09c0a7186bb66c0d5c0c3ab65f1a3b1b59a8649f2412ade857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190405 Malicious code in xo-helios-child-process-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6abf116ef5bd6a77aedf9bcc2b5428a4945e26fbf2e8c0d79a0fccebb457771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113244

Malicious code in geckodriver-jabbah-ignite-xo npm...

Malicious code in geckodriver-jabbah-ignite-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4507051c332a729b6cc8aa5e646269609ee1d1a86c0e98c10de96f5fb7770530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120174

Malicious code in xo-sirius-cors-canopus npm...

Malicious code in equinox-miranda-achernar-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c8de5522a4e10c92463701c201ae813abede03a36430c363f3d3a3e580f9db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111306

Malicious code in meissa-ini-xo-fomalhaut npm...

EUVD-2025-116855

Malicious code in aether-yaml-xo-xo npm...

EUVD-2025-115455

Malicious code in chalk-passport-xo-mensa npm...

Malicious code in command-xo-ariel-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a366c080a4eaa2648f83bcb94435f3176e85614a052f24641242493394fa733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...