EUVD-2025-178494

Malicious code in hugo-unuk-leda-altair npm...

EUVD-2025-177994

Malicious code in lyra-archaeoastronomy-graviton-altair npm...

EUVD-2025-176104

Malicious code in superposition-brane-gravity-altair npm...

EUVD-2025-180442

Malicious code in altair-async-jabbah-radioastronomy npm...

Malicious code in brane-venus-betelgeuse-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558276da0386c127016f30005da101fb0864551790dad588cd551158b91bed58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177926

Malicious code in mdx-zenobia-altair-colors npm...

EUVD-2025-178064

Malicious code in lint-staged-tailwindcss-altair-dotenv-safe npm...

EUVD-2025-180015

Malicious code in blueshift-standard-altair-higgs npm...

EUVD-2025-180441

Malicious code in altair-genomics-firebase-janus npm...

EUVD-2025-177347

Malicious code in paleontology-mensa-altair-exec npm...

EUVD-2025-112578

Malicious code in impulse-altair-iota-avior npm...

EUVD-2025-115923

Malicious code in build-altair-winston-cli npm...

EUVD-2025-120757

Malicious code in virgo-toml-passport-altair npm...

EUVD-2025-116747

Malicious code in altair-meteor-rollup-solis npm...

EUVD-2025-121316

Malicious code in tethys-canopus-altair-docusaurus npm...

EUVD-2025-111599

Malicious code in loglevel-morgan-quito-altair npm...

EUVD-2025-116750

Malicious code in altair-fusion-lyra-nebula npm...

EUVD-2025-122724

Malicious code in relay-cli-altair-forever npm...

MAL-2025-146208 Malicious code in pino-altair-uninstall-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0423eb7c4257b5d212c7e4a2eddf4cdb96433580e42544234fa6e5818cbd10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139348 Malicious code in altair-chai-transform-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e57b70246ceb72a49720b47e3ecfd3567bcccae73b01aba9d723cd8ba9b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...