MAL-2025-185351 Malicious code in @walletify/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf24003a1ce3e60950dc6d7029b916a3794e42fd751e4370d5241a1cef53ba81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-175384

Malicious code in @walletify/backend npm...

MAL-2025-185350 Malicious code in @walletify/backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f030c1111fb06c5daf5d9b522a95b60e2059a449d880165d538d494c7ea99993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commitlint-config-angular-nodejs-carpo-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff6171864c8dd888f734cabf61ae22f26f3868044dd59eb396032310cdbcf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179263

Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia npm...

EUVD-2025-180275

Malicious code in async-command-farout-hexo npm...

EUVD-2025-175550

Malicious code in wind-quick-char-yaml-thread npm...

EUVD-2025-175842

Malicious code in ultra-mira-centaurus-io npm...

Malicious code in redgiant-callisto-altair-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52623704e8e59183b20b689afbfb07d866c14348d1b2354d955944d41d54d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175567

Malicious code in weywot-wezen-cryovolcano-auriga npm...

EUVD-2025-179120

Malicious code in entanglement-tachyon-puppeteer-cressida npm...

EUVD-2025-180159

Malicious code in babel-ophiuchus-mira-bellatrix npm...

EUVD-2025-175944

Malicious code in thuban-areology-event-quasar npm...

EUVD-2025-178735

Malicious code in genomics-outercore-mongoose-csv npm...

Malicious code in higgs-biosignature-inflation-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6af5f94c074749c796605831b304d3b23f9cd7ecd27b0771334f6c877a95bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-middleware-mongoose-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0a7212482567b4ff70ad523ee9502116475db634fa180bfd66e4025e91737e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179771

Malicious code in changelog-hugo-fusion-tectonic npm...

EUVD-2025-176032

Malicious code in tectonic-pegasus-axios-nashira npm...

Malicious code in phi-private-async-earth-xi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b930c14e745c4ce4165a894796d9879c130ecb462db863194881e2488a88548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-juno-supernova-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5416570aa5bf98628db20b38d6aa688ee1a11743013f75bbbf34b033fb219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...