EUVD-2025-178326

Malicious code in izar-mini-css-extract-plugin-hercules-nightmare npm...

EUVD-2025-176854

Malicious code in quark-iota-paleoclimatology-enif npm...

EUVD-2025-177592

Malicious code in nightwatch-nashira-wavefunction-perturbation npm...

EUVD-2025-177803

Malicious code in miranda-native-alphard-browserify npm...

EUVD-2025-176782

Malicious code in readable-commitizen-photon-gatsby npm...

EUVD-2025-179037

Malicious code in eslint-plugin-husky-pavo-virgo npm...

Malicious code in jabbah-areology-archaeometry-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1450f46fd9e16986c07c3d8779c3e55418dc857de0953803ae76fac04be89af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genomics-lightyear-mesosphere-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1443676fd94c32ffc79df6aede4df75f935ca9d1bc99e7c99bdeb9e440ebdd1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-polaris-gridsome-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2d7daf5a58341775641235bf8ae1045625d4dfe06b3b0772252ddf9a2d15bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178868

Malicious code in forever-regulus-hyperion-commitizen npm...

EUVD-2025-176629

Malicious code in rimraf-middleware-mysql-pavo npm...

EUVD-2025-179440

Malicious code in cygnus-tool-update-xenos npm...

EUVD-2025-178220

Malicious code in kardashevscale-apex-neptunology-astrometry npm...

EUVD-2025-177460

Malicious code in omicron-short-water-easy-beta npm...

Malicious code in mechatronics-xenos-fomalhaut-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecfc4d442ea48f03d59f82d8103e499b19aba52c3c0d7bff202c16e10d0043a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-venus-loop-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ed06828532b121a84a1185a79336c108250ef8e69551667cb9ac3227c6fab1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179672

Malicious code in colors-superflare-rigel-quark npm...

Malicious code in webdriverio-umbriel-sequelize-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367388f26f8901408f98dabc1ad28b7b62064486fc25c56a4c1d0405469cb2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179690

Malicious code in cluster-wind-fork-view-monitor npm...

Malicious code in chalk-interferometry-telesto-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a02471fea4f80ed0b903454c83af16d69d52baacd41a34b3477026c957a429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...