EUVD-2025-114928

Malicious code in cosmiconfig-gemini-fornax-impulse npm...

EUVD-2025-112563

Malicious code in impulse-pino-eridanus-release-it npm...

EUVD-2025-112573

Malicious code in impulse-dotenv-parse-variables-jest-node-config npm...

EUVD-2025-124569

Malicious code in neptune-antares-impulse-phoenix npm...

Malicious code in elara-impulse-galaxy-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862019025039512d743d8a22f192c01a4be212e4051f80ef7e9fd4891922d583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112570

Malicious code in impulse-fornax-element-ui-aether npm...

Malicious code in grunt-chai-impulse-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7201b865b3e0a28841237385e3de63e60d0e7aa6da5ee7b88ec0f34a2bed21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112561

Malicious code in impulse-react-bootstrap-gacrux-stream npm...

Malicious code in yildun-antares-mui-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b10b5e93a26dbeeca2443fc906e35cd7a1c3d3a6f0ebfe158c9a50ca3ad24d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-impulse-google-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64253d98a3b179cdf618b13e89d5a5f95ef849bb79e9b3defa67808c704664e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113839

Malicious code in europa-impulse-chariklo-antares npm...

EUVD-2025-113309

Malicious code in ganymede-impulse-avior-dorado npm...

EUVD-2025-120392

Malicious code in wolf-antares-uninstall-impulse npm...

EUVD-2025-112560

Malicious code in impulse-rimraf-schema-webdriver-manager npm...

EUVD-2025-120126

Malicious code in yildun-antares-mui-impulse npm...

EUVD-2025-112928

Malicious code in hapi-impulse-dotenv-parse-variables-prettier-plugin-markdown npm...

EUVD-2025-111781

Malicious code in less-loader-stream-apollo-impulse npm...

EUVD-2025-115696

Malicious code in carina-impulse-slidev-comet npm...

EUVD-2025-115033

Malicious code in convict-impulse-electron-builder-cordelia npm...

Malicious code in stream-impulse-halley-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f43ed0fe224677a8bd0b3ddeca70ab4093b2d2108e29be6a7fb5bd8c529553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...