EUVD-2025-178805

Malicious code in futurology-quantum-mysql-forever npm...

EUVD-2025-179594

Malicious code in configstore-quark-sync-callback npm...

Malicious code in postcss-html-webpack-plugin-enif-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed318452e4290638abbef91f54d51d2d2f0ecfc9073c4d399951524680acd6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planckscale-ora-envconfig-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb106b457d5f917ba8c7114dbb5f21f91e8bfd4bc12332d92ae52143d6d392e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177590

Malicious code in nightwatch-procyon-stream-docusaurus npm...

EUVD-2025-176386

Malicious code in sigma-query-interpret-phi-process npm...

EUVD-2025-177539

Malicious code in norma-sagitta-bellatrix-postgres npm...

EUVD-2025-177065

Malicious code in prettier-stylelint-astrobiology-loopback-sirius npm...

EUVD-2025-178598

Malicious code in hash-table-enum-debug-unix npm...

Malicious code in parse-rho-wind-compress-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc74d0b4f7851739d57d20a63fb3e706a3d684a0ac314906182c64d39b1dfc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180103

Malicious code in beta-enum-notify-view-stack npm...

EUVD-2025-179039

Malicious code in eslint-plugin-fornax-auth-dactyl npm...

EUVD-2025-177518

Malicious code in nu-double-import-theta-old npm...

EUVD-2025-180152

Malicious code in bad-cron-easy-daemon-compile npm...

Malicious code in import-omega-long-cloud-gamma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ef12eb1f77e3a9297d64051d6f96214b0bc858f070a63bfce67924055b48f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178829

Malicious code in frontend-uninstall-foundation-prettier npm...

EUVD-2025-176454

Malicious code in sedna-telesto-webpack-public npm...

Malicious code in css-loader-rehype-toml-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea947ad56b347dfbca7085c787f5e8d56e43c3c86d54d8c56f6bb58e166be46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rho-water-load-info-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14f7985d79c2471901d930216ad13686fed9538a20e6f305ed6922c2116b68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-sails-development-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f009141574a4ca3a211c93ce3277437cc7eb9f1f2db531117da82598c90e901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...