Malicious code in easy-serialize-omicron-mu-assert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69139970a915ceb4235e38acc7b982f8685dd4a844c2ea07bc4144d8a42be7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178056

Malicious code in lithosphere-quark-mesosphere-cache npm...

EUVD-2025-179414

Malicious code in dagda-event-despina-event npm...

Malicious code in enum-report-char-rho-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75fe47f9adba20f092284e704a6a5619427390e0fff83d48dab8122cbd9ecac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geochemistry-izar-farout-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c732107926c21e3fdbe7b6bf70d3a4004926edf48f6407d538a08324f8500fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-whitedwarf-betelgeuse-plutology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2787349d2a0b1c5c6c6c213c0c755d72dd5c786eff681299c936ceca5da3a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179656

Malicious code in comet-xanthus-cosmos-protoplanetarydisk npm...

EUVD-2025-179172

Malicious code in elektra-xml-grus-hugo npm...

EUVD-2025-177278

Malicious code in pegasus-radiant-sedna-juno npm...

EUVD-2025-177415

Malicious code in orbit-luna-indus-xanthus npm...

Malicious code in backend-crust-cordelia-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9abfdf4b11861c28b5f846e1b02a001c90a9a855d5563ce213d97013e6a36817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175593

Malicious code in webdriverio-thermosphere-cladistics-multiverse npm...

EUVD-2025-176545

Malicious code in sails-link-update-glaciology npm...

EUVD-2025-176221

Malicious code in star-permission-parse-assert-small npm...

EUVD-2025-176032

Malicious code in tectonic-pegasus-axios-nashira npm...

EUVD-2025-176027

Malicious code in tectonophysics-paleoanthropology-pegasus-astrophysics npm...

EUVD-2025-177141

Malicious code in planetology-borealis-nashira-celeste npm...

EUVD-2025-178674

Malicious code in gravitationalwave-transhumanism-repository-cors npm...

EUVD-2025-180329

Malicious code in ariel-callisto-commitlint-config-angular-install npm...

Malicious code in remark-loglevel-process-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b2cdb762f4052d4146c3d2d35d10fe3fe6516343cf764c76cc9a051dfc4474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...