EUVD-2025-177707

Malicious code in native-callback-prettier-magellan npm...

EUVD-2025-177705

Malicious code in native-docusaurus-xerxes-unuk npm...

EUVD-2025-177703

Malicious code in native-gacrux-antares-phoenix npm...

EUVD-2025-177630

Malicious code in neutronstar-native-dynamo-hydra npm...

EUVD-2025-177548

Malicious code in nodemon-kinetic-native-cassini npm...

EUVD-2025-176874

Malicious code in quantum-darkmatter-native-schema npm...

EUVD-2025-178171

Malicious code in kuiperbelt-phoebe-native-abiogenesis npm...

EUVD-2025-179498

Malicious code in cross-env-native-centaurus-dynamo npm...

EUVD-2025-179781

Malicious code in chalk-pulsar-native-xerxes npm...

EUVD-2025-176805

Malicious code in radiometric-native-adonis-cygnus npm...

EUVD-2025-179202

Malicious code in eclipse-parsec-native-commitlint-config-angular npm...

EUVD-2025-176916

Malicious code in publish-thermosphere-native-cosmochemistry npm...

EUVD-2025-177701

Malicious code in native-izar-hugo-start npm...

EUVD-2025-180057

Malicious code in biomimicry-epimetheus-thermochronology-native npm...

EUVD-2025-177697

Malicious code in native-rollup-plugin-sagitta-tectonophysics npm...

Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d49cf4e544253b65eeab4ed53118e7a101dca71f9c8857859e37df800820da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177696

Malicious code in native-thermosphere-hermes-server npm...

EUVD-2025-177700

Malicious code in native-nashira-seismology-heliophysics npm...

EUVD-2025-177698

Malicious code in native-rate-limiter-uninstall-regulus npm...

MAL-2025-186680 Malicious code in eclipse-parsec-native-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad95dcc42d1e37b32db227d88bcbb1c29f48527e882181591d17621d99b3b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...