EUVD-2025-177746

Malicious code in mui-auth-betelgeuse-xo npm...

EUVD-2025-179729

Malicious code in cladistics-charon-sagitta-protractor npm...

EUVD-2025-177480

Malicious code in odin-start-sagitta-got npm...

EUVD-2025-178515

Malicious code in holography-development-nightmare-uranology npm...

EUVD-2025-177571

Malicious code in node-config-pulsar-buffer-luna npm...

EUVD-2025-176500

Malicious code in schema-terser-prompts-rollup npm...

EUVD-2025-178562

Malicious code in helios-webdriver-mocha-superposition-phylogenetics npm...

Malicious code in init-enceladus-quark-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29ae2356859bcc4b9a2c4aaa80833cc872c02d453215111497fe3fce96496f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175988

Malicious code in test-sigma-reject-daemon-cold npm...

Malicious code in scripts-chalk-nodemon-eigenstate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ff9d37ccd592d5799db1e3e194c0c92dc1adedeb27ad583add87531d2bea23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177731

Malicious code in mutation-cladistics-graviton-upgrade npm...

Malicious code in betelgeuse-cassini-lyra-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceaa53a75ecaa03edd7aa29ab318da2007e7edc0328de4c86c5f8b43089add6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177673

Malicious code in nebula-polaris-prettier-wormhole npm...

EUVD-2025-178331

Malicious code in isostasy-loopback-docusaurus-inflation npm...

Malicious code in good-minify-private-container-object (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b032c4996d44ce62c30eba2b2781375d7b3c99daea21c2cbf85535105cb6269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-planckscale-helmet-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f72530dd247b457218e0e4f8916ac3dc415a8a2eab4401eb9bd37f23deb50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177014

Malicious code in promise-jovian-cli-nightwatch npm...

EUVD-2025-177016

Malicious code in promise-impulse-levels-exec npm...

EUVD-2025-175943

Malicious code in thuban-charon-uninstall-nextjs npm...

Malicious code in octans-prompts-hyperion-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82dfc59630dc6579e771d7439a8c775e0056caae7877235573ac6d2d0277f2dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...