EUVD-2025-176116

Malicious code in supernova-apex-brane-callback npm...

EUVD-2025-179902

Malicious code in callback-typeorm-venus-umbriel npm...

EUVD-2025-179909

Malicious code in callback-dynamo-lacerta-chakra-ui npm...

MAL-2025-188756 Malicious code in pm2-development-postcss-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d8abe1ab361bfdc7c9bcd7a0b5a189b4e741150d6a0e1f27487db31c5615e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179906

Malicious code in callback-jekyll-public-nebula npm...

MAL-2025-190219 Malicious code in warp-boson-callback-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95312546c36f2f246c3a72e1074b30f6d60280d986fd0cd2fc73fee683e7972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185984 Malicious code in callback-zephyr-semantic-ui-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc3ae303ee981c1075c7fce2279b092cf996dc5af84dcd3a3fbe2c0c2f2810e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186899 Malicious code in exobiology-callback-commitlint-config-angular-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d03030a05c5bd857db6811b031add8d86b357970bbd076059ac391ba964d545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175657

Malicious code in warp-boson-callback-supercluster npm...

EUVD-2025-180279

Malicious code in astrophysics-prosthetics-callback-deneb npm...

EUVD-2025-179939

Malicious code in bunyan-callback-pipe-mysql npm...

Malicious code in soap-callback-convict-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4922425b583d08a372e377d0b2ee372ad8912aa2da5902301f4c5ec520af10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179907

Malicious code in callback-fomalhaut-slidev-library npm...

EUVD-2025-179908

Malicious code in callback-elara-hadron-jekyll npm...

EUVD-2025-176416

Malicious code in server-callback-css-loader-archaeoastronomy npm...

EUVD-2025-179290

Malicious code in docusaurus-callback-abiogenesis-mesosphere npm...

EUVD-2025-179068

Malicious code in eris-callback-boson-cosmicsilence npm...

EUVD-2025-179905

Malicious code in callback-kastra-wolf-abiogenesis npm...

Malicious code in bunyan-callback-pipe-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c6a30fabd9762255234275520307cd432fbd98a02b188eba9e94d2334be6b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-iota-graphql-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0216011a857c745443a164b8b961b2825a42498fd66c95b1ea56899885b894bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...