EUVD-2025-176045

Malicious code in taurus-mutation-izar-node-sass npm...

EUVD-2025-180482

Malicious code in airbnb-australis-inflation-changelog npm...

EUVD-2025-175937

Malicious code in titan-fusion-virgo-slides npm...

EUVD-2025-178247

Malicious code in juno-ichnology-dotenv-safe-javascript npm...

EUVD-2025-180525

Malicious code in ablation-scripts-pino-terraforming npm...

EUVD-2025-179439

Malicious code in cygnus-umbra-webdriver-mocha-docusaurus npm...

Malicious code in ignite-puppeteer-procyon-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942ca35b8c2f4e4e8dc8c86ec24036c42d8ce46b186eda56cebb6b25eb2c0388 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175427

Malicious code in zenobia-colors-neptunology-darkmatter npm...

EUVD-2025-179683

Malicious code in cold-hot-beta-log-daemon npm...

EUVD-2025-179629

Malicious code in commitlint-config-angular-sadr-cluster-mira npm...

EUVD-2025-176506

Malicious code in scale-deserialize-function-optimize-hot npm...

EUVD-2025-175548

Malicious code in winston-adonis-dotenv-parse-variables-dagda npm...

EUVD-2025-177246

Malicious code in perseus-websockets-wasat-hydra npm...

Malicious code in betelgeuse-perseus-despina-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba22f0c594d568d54e12967d841c787fd3e71573d84357c6a218f291e91747a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175578

Malicious code in websockets-winston-neptune-ablation npm...

EUVD-2025-180073

Malicious code in biogeochemistry-remark-module-cygnus npm...

Malicious code in proxima-dotenv-safe-carpo-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809ba230c6e94942943f5a24f1f5fe052d4c80da9132b34a273195324e638143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-lacerta-fornax-cryonics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba1bd24776a3f69180c132bd70b8afbbc2328c0fa93eda6da0df9e3e68ff38f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-meissa-subscription-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e80d941c3ae4c03da2554b9884257c7aa6be8bde051d376559e56e35e912880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-bellatrix-standard-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7609f325b00b45170897f239a83a8f9f0a9ba0025c5dc5641331b70050b2b2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...