EUVD-2025-176357

Malicious code in sirius-nuxtjs-genomics-hydrogeology npm...

EUVD-2025-176091

Malicious code in sync-decoherence-xanthus-express npm...

EUVD-2025-180472

Malicious code in aldebaran-lyra-magellan-bulma npm...

EUVD-2025-176278

Malicious code in spawn-nova-antares-sync npm...

EUVD-2025-177530

Malicious code in nova-chakra-ui-css-loader-eris npm...

EUVD-2025-176662

Malicious code in rest-nova-nightwatch-commitlint-config-angular npm...

EUVD-2025-177524

Malicious code in nova-sagitta-pegasus-hermes npm...

EUVD-2025-178333

Malicious code in iota-zephyr-nova-octans npm...

EUVD-2025-177108

Malicious code in polaris-publish-vortex-jekyll npm...

EUVD-2025-179348

Malicious code in delta-string-enum-thread-uglify npm...

EUVD-2025-176708

Malicious code in release-it-nova-orbit-figures npm...

EUVD-2025-179326

Malicious code in dependencies-nova-meteor-mira npm...

Malicious code in atlas-repository-nova-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84fc45a419be4c1ce2710de99244938901158da76b1ac1d2918bbfe8148ef905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new-alpha-transpile-air-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8e3db03121c3663892d5f746b8b321a800b7a770d3d09ca75fb79837f5ec84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180476

Malicious code in airbnb-tethys-enif-nova npm...

EUVD-2025-175496

Malicious code in xenos-nconf-aurora-redis npm...

EUVD-2025-177290

Malicious code in pegasus-cache-passport-vortex npm...

EUVD-2025-177598

Malicious code in nightwatch-firebase-janus-package npm...

EUVD-2025-175492

Malicious code in xerxes-coronalmassejection-flare-filament npm...

Malicious code in report-epsilon-socket-beta-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a374b6f621a7480a7de9e738180564cc75591db6337a7b845ed16decbc25ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...