EUVD-2025-176257

Malicious code in spectroscopy-webdriver-manager-await-bootstrap npm...

EUVD-2025-179172

Malicious code in elektra-xml-grus-hugo npm...

Malicious code in orbit-publish-dynamo-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cea22e2995495ae31f048c41734ea03860fac70bf7d26e7ae19a80dde208ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179712

Malicious code in cli-webdriver-manager-lint-staged-auth npm...

EUVD-2025-175618

Malicious code in webdriver-manager-bulma-pino-pretty-hercules npm...

EUVD-2025-179251

Malicious code in double-decode-encrypt-cache-bundle npm...

EUVD-2025-176435

Malicious code in semantic-release-webdriver-mocha-holography-init npm...

Malicious code in filament-axios-node-config-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b4ca708c825886f59edaa9b7603233077a52e4be38ca0410b533b306826913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178277

Malicious code in jekyll-resolvers-quark-xenobiology npm...

EUVD-2025-179140

Malicious code in encrypt-bundle-test-deploy-scale npm...

Malicious code in code-report-cold-iota-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64bf5e8505918bd9d308b0badcac899a832317e13a323ffe00e5666a0329a5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleoclimatology-eventhoriz-areology-higgs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69773d9a5c3889d618b425370e12b0c6366104d947651f8e479e7215d1ddd1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in run-script-taphonomy-interstellarmedium-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51879f1dbe92808190dfdb4174790001ed7d379658ca47564fa784211fcb2319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-framework-miranda-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5b0d8a450baae1d7aebb7e8c503e1c07b94b3b3045f053bec0e0145f5d1165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in refactor-private-table-finally-water (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7fe350226f8e4b7671ddae6faacdaa25fcb6d3a536a3576ea5fb7a4c42e214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in byte-runtime-easy-promise-transpile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325875c77ac94cceec81e2be9da4d8c3435e647db500e4d50cc6529b1dab65a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178575

Malicious code in heka-neptune-nightwatch-andromeda npm...

Malicious code in forever-cygnus-postcss-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89fd6949db8f73f60ad61fd46e85a491a3d296a9479c600d2a79f928c0d66e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in earth-protected-gamma-test-star (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607017a42bce9e56670763a33b409d170584375240403b448fd7b4741454f5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-request-dysonswarm-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1b03cec1c5daf993196232116f24865c643b035dc6a9255cf8d2656074c012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...