EUVD-2025-180424

Malicious code in antares-cluster-ursa-javascript npm...

EUVD-2025-176893

Malicious code in puppeteer-module-sails-nextjs npm...

EUVD-2025-177595

Malicious code in nightwatch-javascript-kastra-antares npm...

EUVD-2025-176561

Malicious code in sagitta-javascript-process-telesto npm...

EUVD-2025-178068

Malicious code in lint-staged-javascript-jwt-zooarchaeology npm...

EUVD-2025-178283

Malicious code in javascript-magnetar-epimetheus-figures npm...

EUVD-2025-177298

Malicious code in passport-wasat-javascript-link npm...

EUVD-2025-178285

Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation npm...

Malicious code in chai-javascript-pulsar-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e42433738cc5a2accb6a2b35a72082ee4ac69aa8f58a357c9658e5819a94fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176745

Malicious code in registry-readable-nucleosynthesis-jsonp npm...

EUVD-2025-175432

Malicious code in zenith-algol-nodejs-pegasus npm...

EUVD-2025-178115

Malicious code in levels-event-bionics-nodejs npm...

EUVD-2025-178247

Malicious code in juno-ichnology-dotenv-safe-javascript npm...

EUVD-2025-175852

Malicious code in uglify-js-buffer-exosphere-soap npm...

Malicious code in procyon-andromeda-configstore-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 785e4e375fc95922d8389ed7d245344faafc074033303af2c8e26d46a8b78313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176994

Malicious code in prosthetics-outercore-javascript-taphonomy npm...

MAL-2025-187251 Malicious code in gulp-javascript-carpo-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83f3fb31d46de531e486584cf860923fbaef0e8a21f7f9233132af1ea5a5ebc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188783 Malicious code in postcss-loader-prosthetics-loopback-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f9f63b6e2e1816f62d699a65d1f5b8c88dc6d76c09ded78c5dca4dcc42d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187369 Malicious code in hot-awk-authorize-float-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df4235ff8db5bad46f5f2c4d44b8dab9433e8757e02f1464f1d3f48a4707c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185505 Malicious code in apollo-nodejs-helmet-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03f8efa0ddd24ff187a77bfbf2653e94f12a622525a7c6ac90cd8bb470c36f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...