EUVD-2025-177752

Malicious code in morgan-spectron-webdriver-primatology-aldebaran npm...

EUVD-2025-175988

Malicious code in test-sigma-reject-daemon-cold npm...

EUVD-2025-176216

Malicious code in start-iota-webpack-cli npm...

EUVD-2025-179290

Malicious code in docusaurus-callback-abiogenesis-mesosphere npm...

Malicious code in oortcloud-css-minimizer-webpack-plugin-config-cryovolcano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f7585eeec78d135fc3f19ee9979e64089eeaea12fcd8b0be0c70ead619b829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new-alpha-transpile-air-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8e3db03121c3663892d5f746b8b321a800b7a770d3d09ca75fb79837f5ec84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175674

Malicious code in vuetify-xanadu-stratigraphy-sedimentology npm...

EUVD-2025-180248

Malicious code in atlas-repository-nova-eclipse npm...

Malicious code in magellan-hyperion-gridsome-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a5df34c1f19de7677a58006bccb59e510052f7e8102d6f117af9856b778f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177755

Malicious code in morgan-react-bootstrap-cz-conventional-changelog-helios npm...

EUVD-2025-176277

Malicious code in spawn-regulus-brane-nodemon npm...

EUVD-2025-178283

Malicious code in javascript-magnetar-epimetheus-figures npm...

Malicious code in permission-emulate-cloud-beta-stub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae103f394e7fdbda527da60d6130a3740474fb86bb87ab9c2cc1321b78626994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176270

Malicious code in spectron-config-cluster-command npm...

EUVD-2025-178213

Malicious code in karma-spectron-parcel-aether npm...

EUVD-2025-175951

Malicious code in throw-async-object-public-integer npm...

Malicious code in stub-emulate-decompress-view-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3014404892613825d603f59e7f5acebc98b397d1e96068233852a6fa05f78311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176194

Malicious code in stream-andromeda-proxima-loglevel npm...

EUVD-2025-176369

Malicious code in singularitarianism-prosthetics-wolf-exosphere npm...

Malicious code in fusion-writable-redgiant-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93ec88221f7e1c4c2b9ca4a7d46b67a0e7e51b80a43ce3317fba938d101de6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...