EUVD-2025-177251

Malicious code in perseus-query-halley-selenology npm...

EUVD-2025-179482

Malicious code in cryovolcano-miranda-blueshift-rimraf npm...

Malicious code in pipe-astrophysics-astroinformatics-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c1a63f8bc23f63c7f34c6526b949675e4cff34dd203b22a467e3952555220b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176769

Malicious code in redis-astrophysics-astrophysics-webpack npm...

Malicious code in hexo-publish-hexo-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00717e5974b423da54268e70eeedbebfd4bb4bf7ee91f3dd7e0b29ca6d88211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178735

Malicious code in genomics-outercore-mongoose-csv npm...

EUVD-2025-178008

Malicious code in luminescence-colors-resonance-publish npm...

EUVD-2025-177026

Malicious code in procyon-slidev-process-webpack npm...

EUVD-2025-178539

Malicious code in hermes-config-unuk-aurora npm...

Malicious code in ophiuchus-vuetify-schema-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d9884ad3402f26f5a8382505851349e77b9da40d9ab72fdef1d8653e7a5ac4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178050

Malicious code in load-wind-root-balance-file npm...

Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ecf14a07cd348f4aef4bf71dd063f333aee890c7b9fffa4af049cac1d997ef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wind-psi-zeta-debug-zeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb1fbb789018c346a5f6f4730f72aeec7f3a6b735977e2c9cd571c4d32b0a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178260

Malicious code in json-apollo-rate-limiter-cross-env npm...

EUVD-2025-179161

Malicious code in emulate-earth-lambda-iota-mock npm...

EUVD-2025-178285

Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation npm...

Malicious code in deploy-awk-user-psi-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85974b235976ec2159baa382d8cac5043c2dfa29505a618c566d90e5a64e62a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-simple-awk-sudo-class (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 802dd61e2bb009c247c01e639f24d56321322ea9411258462212b63efbbf3525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178946

Malicious code in farout-colors-hologram-mini-css-extract-plugin npm...

Malicious code in nebula-lyra-astrophysics-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87731194882f0a9904a010dc5c887ceff5fea966c6f645da196e94537a27f879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...