EUVD-2025-122889

Malicious code in rate-limiter-carina-despina-uglify-js npm...

EUVD-2025-123667

Malicious code in pino-uglify-js-uninstall-cli npm...

EUVD-2025-111957

Malicious code in kaus-uglify-js-version-node-config npm...

EUVD-2025-121049

Malicious code in uglify-js-query-rest-triton npm...

EUVD-2025-116273

Malicious code in axios-graphql-umbriel-uglify-js npm...

EUVD-2025-112863

Malicious code in helmet-dactyl-flare-uglify-js npm...

EUVD-2025-121056

Malicious code in uglify-js-eslint-callisto-meissa npm...

MAL-2025-147033 Malicious code in rate-limiter-carina-despina-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d89afb49e1baf7114e84e9d0a8e776e8bd8a7494a4fcaa12145552f4ec4505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146102 Malicious code in perseus-ora-spawn-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148213 Malicious code in spinner-uglify-js-sequelize-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec3d26ff88984e14fb77619434a0b3aa7a4dbbd8742914e7a787d85979a1bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120459

Malicious code in wezen-uglify-js-stop-regulus npm...

EUVD-2025-112784

Malicious code in hermes-stop-uglify-js-axios npm...

MAL-2025-143249 Malicious code in helmet-dactyl-flare-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bd1c045b58ad64b757331e6f73aabe93eb2e88d53c053b83f4c13383b3f05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116438

Malicious code in atlas-uglify-js-dependencies-playwright npm...

EUVD-2025-116673

Malicious code in antares-pegasus-request-uglify-js npm...

MAL-2025-142826 Malicious code in ganymede-uglify-js-quark-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df50c36528c4a8e1bab4e35ccc450588e1ba30021f8c1a6b0fc5acae6fac685a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120766

Malicious code in virgo-nuxtjs-achernar-spectron-webdriver npm...

EUVD-2025-124614

Malicious code in nconf-ceres-css-minimizer-webpack-plugin-nuxtjs npm...

Malicious code in celeste-cli-uglify-js-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed63cfb1fb82bc628b16d127c52caa67e626fb4c898671692e4b6fb1d5e614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-grus-gacrux-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992d9509225ff4662c83cd02c736feeaf3c3c0e546718d9dc8aa3474d3e661c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...