EUVD-2025-177641

Malicious code in nestjs-postcss-loader-slides-spinner npm...

Malicious code in cat-sudo-node-decrypt-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0a5654a946e29c85296ee9ea01233be92fe24df0af60de4d8e5e56deb22634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175748

Malicious code in user-reject-good-code-sed npm...

EUVD-2025-176688

Malicious code in repository-repository-nconf-barnard npm...

EUVD-2025-178411

Malicious code in ini-koa-adonis-astrometry npm...

Malicious code in easy-cron-secure-thread-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d9a4e75826baaad3bfb8184f3a94bbff375967fdd2b655b15a9b74959d6387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad-stub-key-fast-minify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c2c8f6d14460407b52dec97db373eef1b32d2587cad3e6194362609b822c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178352

Malicious code in ionosphere-webdriverio-module-primatology npm...

EUVD-2025-178331

Malicious code in isostasy-loopback-docusaurus-inflation npm...

EUVD-2025-176171

Malicious code in stub-query-psi-throw-secure npm...

EUVD-2025-178099

Malicious code in library-update-commitizen-jabbah npm...

EUVD-2025-177767

Malicious code in mongoose-odin-rimraf-petrology npm...

EUVD-2025-177400

Malicious code in oscillation-aquarius-ursa-parallax npm...

EUVD-2025-177590

Malicious code in nightwatch-procyon-stream-docusaurus npm...

EUVD-2025-180301

Malicious code in astro-photon-publish-blazar npm...

Malicious code in websockets-kinetic-janus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b40b5853ee3b4de685feaf1b32ad292ac1711fbe189faa330594cdd0f9238a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179449

Malicious code in csv-puppeteer-phoenix-event npm...

EUVD-2025-179760

Malicious code in char-double-load-notify-gamma npm...

EUVD-2025-178851

Malicious code in fornax-jest-ariel-spica npm...

Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0400d978fa965e52d12202d981d0a00f84aed877346a6ddbd17443b12575da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...