EUVD-2025-176646

Malicious code in rho-alpha-phi-cluster-water npm...

EUVD-2025-179693

Malicious code in cluster-volcanology-eslint-plugin-singularity npm...

EUVD-2025-179704

Malicious code in cluster-concurrently-wolf-astrometry npm...

EUVD-2025-175778

Malicious code in upsilon-socket-cluster-static-eta npm...

EUVD-2025-179692

Malicious code in cluster-wavefunction-subduction-transhumanism npm...

EUVD-2025-176089

Malicious code in sync-taurus-cluster-webpack npm...

EUVD-2025-180532

Malicious code in abiogenesis-cluster-astrophysics-epigenetics npm...

EUVD-2025-179700

Malicious code in cluster-norma-solarnebula-outercore npm...

EUVD-2025-175547

Malicious code in winston-boson-publish-cluster npm...

EUVD-2025-179389

Malicious code in data-virtualize-cluster-view-phi npm...

EUVD-2025-180192

Malicious code in await-async-cluster-terser-webpack-plugin npm...

EUVD-2025-178677

Malicious code in graphql-karma-cluster-mongodb npm...

EUVD-2025-176211

Malicious code in static-view-warn-cluster-catch npm...

Malicious code in gulp-cluster-hermes-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75be2e9a1f4408daffb548607099533dca2e521294c032121214e57670fec67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175476

Malicious code in xml-sails-cluster-mysql npm...

Malicious code in gacrux-magellan-cluster-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8027ca7b26fabf039bb2e1967abc63917cc89e3b61e4199161637cf28297e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179425

Malicious code in cz-conventional-changelog-sirius-cluster-tectonophysics npm...

EUVD-2025-179116

Malicious code in enum-new-encode-tree-cluster npm...

Malicious code in selenium-cluster-framework-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945e3261b632eb6a730ff1c7db5709620010f8bf20bb163023ccd934c64a084f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-plutology-comet-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efae6173e3dbad8733385d1fb7c202c31c5a07b0f351bc94b93fb683565134e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...