EUVD-2025-178141

Malicious code in lepton-cache-soap-hexo npm...

EUVD-2025-178302

Malicious code in janus-regulus-eclipse-castor npm...

EUVD-2025-177957

Malicious code in markdown-electron-europa-markdownlint npm...

EUVD-2025-177050

Malicious code in private-dorado-grunt-jupiter npm...

EUVD-2025-175430

Malicious code in zenith-cosmiconfig-miranda-standard npm...

EUVD-2025-179008

Malicious code in event-biogeochemistry-blitz-eris npm...

EUVD-2025-180482

Malicious code in airbnb-australis-inflation-changelog npm...

EUVD-2025-179318

Malicious code in deserialize-load-byte-delta-optimize npm...

Malicious code in readable-configstore-regulus-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa106f845b72360c2409496dfe3d10196e362e64b56e8b6839e6b3c82bb06a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180073

Malicious code in biogeochemistry-remark-module-cygnus npm...

EUVD-2025-177246

Malicious code in perseus-websockets-wasat-hydra npm...

Malicious code in betelgeuse-perseus-despina-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba22f0c594d568d54e12967d841c787fd3e71573d84357c6a218f291e91747a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175578

Malicious code in websockets-winston-neptune-ablation npm...

Malicious code in fermiparadox-redshift-rollup-plugin-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbf33468d1a669d9d3768f32cc08b7d8834db618abdd21c594206c8359a7542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theta-validate-meta-air-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d3e186b062df4165b4ff6124f4467a91df506dc840e45e44a67191212c48ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179717

Malicious code in cli-hermes-mesosphere-corvus npm...

EUVD-2025-177827

Malicious code in minify-report-compress-compress-process npm...

EUVD-2025-178517

Malicious code in holography-commitizen-kardashevscale-morgan npm...

EUVD-2025-179259

Malicious code in dotenv-safe-norma-vuetify-paleomagnetism npm...

Malicious code in cosmos-volcanology-cassini-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7589b6b476a0d49718b7677648fafc99e80a2deff34cd47f56d644c1346d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...