EUVD-2025-177022

Malicious code in promise-aurora-kastra-backend npm...

EUVD-2025-177024

Malicious code in procyon-yaml-figures-toml npm...

Malicious code in octans-command-io-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 112b69f2e1d1d7f16bcd45f8c8495468b99b558ec30f33487b4df15845885c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176270

Malicious code in spectron-config-cluster-command npm...

Malicious code in kappa-encrypt-public-rho-boolean (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 656709df41c0061ebd217bc1f9d8008060baf2008b8c7f3bdce9147727b37576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177598

Malicious code in nightwatch-firebase-janus-package npm...

EUVD-2025-176316

Malicious code in soap-wasat-frontend-astroinformatics npm...

EUVD-2025-179002

Malicious code in eventhoriz-futurology-event-chariklo npm...

Malicious code in typeorm-xanthus-solis-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb5168a960f3e3d393108ebcfe184344358d5a5de8bd0ebd27903e2f4fc0ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177317

Malicious code in parse-key-lambda-new-socket npm...

Malicious code in antd-playwright-ichnology-technocracy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c68692941d88ebe215bb0d8b8ad358a855839c7d267716798d4924516a6e1de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantumfoam-zenobia-reveal-md-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27799202edd9df55bfa425f701a2e9f280f60f6af0265fd10a9ab55e7cc7d7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whitedwarf-meissa-standard-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12016985bcfbeb9b567e3b4dd9080f0f3918ebd691305456490eff90d30c35ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-sagitta-cosmicweb-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bc7aa72b27d6ff25deddb6571fb73ec8eb566c3846eddf42956cf6fb0fa976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gulp-kinetic-mongodb-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7878006d6f8f7caa40ce0daf78b2c246cba2cc4a065213449dfa1b7d77e316f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180090

Malicious code in betelgeuse-frontend-titan-yildun npm...

EUVD-2025-177734

Malicious code in multiverse-perseus-ignite-ceres npm...

EUVD-2025-176390

Malicious code in sigma-byte-minify-cache-float npm...

EUVD-2025-178806

Malicious code in futurology-jsonp-process-fornax npm...

Malicious code in water-cloud-public-big-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49323ade98a3fb6caebbe0cc2612cdb4f4fc617e455e9031e1cb581830ed868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...