EUVD-2025-176962

Malicious code in proxima-hugo-pm2-phoebe npm...

EUVD-2025-178567

Malicious code in helios-cressida-biogeochemistry-halley npm...

Malicious code in nightmare-europa-restart-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1282148b41a453d5bba2f2e2c6359c5beb40a47dde6f6cefae0d1cf108effa41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30834a5fbe857adb14874de5f845460556c9a36ba75d7c2eee5f917aa980bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179646

Malicious code in command-react-bootstrap-neuromorphic-magellan npm...

EUVD-2025-175548

Malicious code in winston-adonis-dotenv-parse-variables-dagda npm...

EUVD-2025-176339

Malicious code in slidev-odin-charon-pino-pretty npm...

EUVD-2025-175450

Malicious code in yaml-iota-jasmine-norma npm...

EUVD-2025-179454

Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin npm...

EUVD-2025-180275

Malicious code in async-command-farout-hexo npm...

Malicious code in paleoecology-webdriver-manager-cli-outercore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1702a5ded5d7db3c4166a15a439a1ab13253c487e4124cb1374ba85b937cfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179309

Malicious code in development-child-process-npm-socketio npm...

EUVD-2025-177970

Malicious code in magnetar-thermosphere-nconf-quantum npm...

EUVD-2025-175550

Malicious code in wind-quick-char-yaml-thread npm...

EUVD-2025-176939

Malicious code in public-eclipse-wavefunction-entanglement npm...

EUVD-2025-177711

Malicious code in nashira-dotenv-parse-variables-gulp-lynx npm...

EUVD-2025-179806

Malicious code in chai-gatsby-coronalmassejection-nuxtjs npm...

EUVD-2025-179261

Malicious code in dotenv-safe-jovian-astroinformatics-ablation npm...

EUVD-2025-179037

Malicious code in eslint-plugin-husky-pavo-virgo npm...

Malicious code in load-wind-root-balance-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca2fb4e13ccee0f8eb6b4e06c1a39f11790a077881b18b085022f14fbcb9456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...