EUVD-2025-179723

Malicious code in class-eta-lambda-hash-root npm...

EUVD-2025-178868

Malicious code in forever-regulus-hyperion-commitizen npm...

EUVD-2025-176107

Malicious code in supernova-phylogenetics-terser-abiogenesis npm...

EUVD-2025-176202

Malicious code in stop-prompts-fusion-private npm...

EUVD-2025-178326

Malicious code in izar-mini-css-extract-plugin-hercules-nightmare npm...

EUVD-2025-176634

Malicious code in rimraf-betelgeuse-baryon-selenium npm...

Malicious code in baryon-perturbation-javascript-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e3b91264dd6978584ccce3d20c13f45009b8478f3c69fb0ec077a6d48a37fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179520

Malicious code in cosmos-public-warp-planckscale npm...

Malicious code in selenology-tailwindcss-cosmogenic-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8930f5ec5584cebb34ad1297b7e483e8cc42152b117d3b097a91ef8766b46289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boson-apex-parcel-cybernetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8001d9511352d88a7e53000ad8670d8e302a9876d11a26a839bcbd2c058f4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177482

Malicious code in odin-mensa-magnetar-react-bootstrap npm...

EUVD-2025-178005

Malicious code in luna-cordelia-blackhole-lithosphere npm...

EUVD-2025-178683

Malicious code in got-install-blackhole-pipe npm...

Malicious code in cygnus-tool-update-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6dda9b734db336089ca3b7e1b189859e059a4a50e2263aa85436870537b513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astrochemistry-ionosphere-gravitationalwave-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2119ba76eecde671765855d9947d057698ac00abf631f90c033888f31387b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179403

Malicious code in darkenergy-google-paleoanthropology-thuban npm...

EUVD-2025-179309

Malicious code in development-child-process-npm-socketio npm...

EUVD-2025-175510

Malicious code in xenobiology-materialize-epimetheus-atlas npm...

Malicious code in backend-crust-cordelia-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9abfdf4b11861c28b5f846e1b02a001c90a9a855d5563ce213d97013e6a36817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-perseus-chalk-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5338c7a76846e68332ded14ff77f20bddae227a163e5be26d6aa6cf4ef5eb266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...