EUVD-2025-175917

Malicious code in tool-tailwindcss-cosmology-native npm...

EUVD-2025-177708

Malicious code in native-blackhole-parcel-node-sass npm...

EUVD-2025-177707

Malicious code in native-callback-prettier-magellan npm...

EUVD-2025-177705

Malicious code in native-docusaurus-xerxes-unuk npm...

EUVD-2025-177703

Malicious code in native-gacrux-antares-phoenix npm...

EUVD-2025-177630

Malicious code in neutronstar-native-dynamo-hydra npm...

EUVD-2025-177548

Malicious code in nodemon-kinetic-native-cassini npm...

EUVD-2025-176874

Malicious code in quantum-darkmatter-native-schema npm...

EUVD-2025-178171

Malicious code in kuiperbelt-phoebe-native-abiogenesis npm...

EUVD-2025-179498

Malicious code in cross-env-native-centaurus-dynamo npm...

EUVD-2025-179781

Malicious code in chalk-pulsar-native-xerxes npm...

EUVD-2025-179202

Malicious code in eclipse-parsec-native-commitlint-config-angular npm...

EUVD-2025-176916

Malicious code in publish-thermosphere-native-cosmochemistry npm...

EUVD-2025-176805

Malicious code in radiometric-native-adonis-cygnus npm...

EUVD-2025-177701

Malicious code in native-izar-hugo-start npm...

EUVD-2025-180057

Malicious code in biomimicry-epimetheus-thermochronology-native npm...

EUVD-2025-177697

Malicious code in native-rollup-plugin-sagitta-tectonophysics npm...

Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d49cf4e544253b65eeab4ed53118e7a101dca71f9c8857859e37df800820da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189970 Malicious code in transform-version-sequelize-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0b260696b6e01b16b95ea6411e5bdda668fb587ccda3c63e369cde6cd117d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186384 Malicious code in cross-env-native-centaurus-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6dce8f7485566682baf52e3ddd7d582e7a2d2645f17719277ec2beaf0b8c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...