EUVD-2025-120095

Malicious code in yonder-iota-karma-protractor npm...

EUVD-2025-120103

Malicious code in yonder-alphard-package-kinetic npm...

EUVD-2025-115445

Malicious code in chalk-yonder-cassini-rimraf npm...

EUVD-2025-120087

Malicious code in yonder-venus-buffer-hermes npm...

EUVD-2025-120104

Malicious code in yonder-acamar-terser-webpack-plugin-ariel npm...

EUVD-2025-122793

Malicious code in registry-gacrux-heka-yonder npm...

EUVD-2025-112543

Malicious code in indus-nconf-jekyll-yonder npm...

Malicious code in xenos-weywot-yonder-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459589f2935fbcead2d7f29e5333332fd8f5e7a26cb0459b689682edf05048f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120089

Malicious code in yonder-resolvers-xml-uninstall npm...

EUVD-2025-122394

Malicious code in rollup-plugin-yonder-draco-fork npm...

EUVD-2025-120101

Malicious code in yonder-apollo-ophiuchus-titan npm...

EUVD-2025-115956

Malicious code in browserify-yonder-meissa-algol npm...

EUVD-2025-113681

Malicious code in farout-yonder-convict-iota npm...

EUVD-2025-113159

Malicious code in global-writable-hugo-yonder npm...

EUVD-2025-112703

Malicious code in hugo-yonder-bellatrix-mensa npm...

MAL-2025-143695 Malicious code in io-eslint-plugin-yonder-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f1228c8a0e8e5f1e992545733045dd7f98234974ca9ca788f347f162434515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141565 Malicious code in dependencies-eclipse-websockets-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e5431a759d39a0e0c0617d7467bc86541b6958fb8d0453e08ae6eccc56a3be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120094

Malicious code in yonder-kinetic-unuk-sirius npm...

MAL-2025-148473 Malicious code in taurus-miranda-yonder-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9522058eacf385789d7b9d2dab9db3cb50cac6b1660e926378d440f667f67abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143450 Malicious code in hydra-pipe-lint-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8bc7b83100d9034cd6ba13dcffc904a47fe59fa5d8bfe9e592b2496d9493a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...