EUVD-2025-176623

Malicious code in robotics-callback-vulcan-html-webpack-plugin npm...

EUVD-2025-176205

Malicious code in stop-callback-wezen-quark npm...

EUVD-2025-177707

Malicious code in native-callback-prettier-magellan npm...

EUVD-2025-178464

Malicious code in hyperion-terraforming-cli-callback npm...

EUVD-2025-179594

Malicious code in configstore-quark-sync-callback npm...

EUVD-2025-179908

Malicious code in callback-elara-hadron-jekyll npm...

EUVD-2025-179903

Malicious code in callback-saturnology-taphonomy-radiant npm...

EUVD-2025-178184

Malicious code in koa-callback-postcss-loader-webdriver-manager npm...

EUVD-2025-177773

Malicious code in mongodb-nodemon-callback-areology npm...

Malicious code in docusaurus-callback-abiogenesis-mesosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42bd97b8e1ec351f3c30094833234126ca837fa785a420b0c9ef4ae12a84d81f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186814 Malicious code in eris-callback-boson-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a197876be7cdffaa146516c71ade6fb43a8bf1e1cc1b4350b8a5ea0d8bb5a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178721

Malicious code in geodynamo-callback-less-eclipse npm...

EUVD-2025-177060

Malicious code in primatology-callback-dactyl-telesto npm...

EUVD-2025-176323

Malicious code in soap-callback-convict-middleware npm...

EUVD-2025-176794

Malicious code in rate-limiter-callback-nebula-electron npm...

EUVD-2025-178518

Malicious code in holography-antares-enif-callback npm...

EUVD-2025-177384

Malicious code in paleobotany-callback-magnetosphere-bellatrix npm...

MAL-2025-189670 Malicious code in stop-callback-wezen-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43fa92762b57b343fad2ecbf79edc792490f94879bf693116bb44049f18da222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178459

Malicious code in ignite-callback-cosmochemistry-paleobotany npm...

Malicious code in callback-zephyr-semantic-ui-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3ae303ee981c1075c7fce2279b092cf996dc5af84dcd3a3fbe2c0c2f2810e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...