EUVD-2025-178359

Malicious code in io-octans-taurus-sedna npm...

EUVD-2025-177636

Malicious code in neutrino-radioastronomy-comet-planetology npm...

EUVD-2025-176140

Malicious code in sun-serialize-parse-validate-alert npm...

Malicious code in signal-authenticate-cluster-await-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9c4b67b3adc6ae2f52304f08d24dafce84d84d9f5fa1ccbc8017c2dc638b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179627

Malicious code in commitlint-publish-fornax-prettier-stylelint npm...

EUVD-2025-179300

Malicious code in development-warp-geoarchaeology-odin npm...

EUVD-2025-178554

Malicious code in helmet-sagitta-saturnology-element-ui npm...

EUVD-2025-179650

Malicious code in command-dotenv-safe-oberon-lint-staged npm...

Malicious code in astrochemistry-planckscale-levels-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09eaada391f12d930144df90244194a3d73586bebf0dca02fb04568762e1e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179790

Malicious code in chakra-ui-standard-nuxtjs-sass-loader npm...

Malicious code in eclipse-parsec-native-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad95dcc42d1e37b32db227d88bcbb1c29f48527e882181591d17621d99b3b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176745

Malicious code in registry-readable-nucleosynthesis-jsonp npm...

Malicious code in root-resolve-wind-stub-interface (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76745c37e2effb609da0372dbe196b1268ae5777b04442b99e59f3da1c499739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180520

Malicious code in abstract-mu-kappa-authenticate-decode npm...

EUVD-2025-179617

Malicious code in concurrently-configstore-lyra-perseus npm...

EUVD-2025-177471

Malicious code in omega-big-zero-export-java npm...

EUVD-2025-177280

Malicious code in pegasus-pulsar-plutology-astrochemistry npm...

EUVD-2025-175837

Malicious code in umbra-iota-graphql-callback npm...

Malicious code in biotechnology-halley-redgiant-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be587c196677b01b0966672ec9c47b63943494c056f4e7e118ca6ae67eeaa0b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in report-epsilon-socket-beta-sudo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a374b6f621a7480a7de9e738180564cc75591db6337a7b845ed16decbc25ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...