EUVD-2025-179708

Malicious code in cloud-star-parse-fork-sandbox npm...

EUVD-2025-180284

Malicious code in astrometry-passport-less-filament npm...

EUVD-2025-176503

Malicious code in scale-phi-deserialize-nu-sed npm...

EUVD-2025-176249

Malicious code in spinner-cryptography-acamar-elara npm...

EUVD-2025-177624

Malicious code in new-optimize-async-spy-process npm...

EUVD-2025-177696

Malicious code in native-thermosphere-hermes-server npm...

Malicious code in pegasus-pulsar-plutology-astrochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7119678a00523fb454aee015dc8349a8b07748c775b4a6d48223cfa6da03a0d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179917

Malicious code in cache-meta-root-try-key npm...

EUVD-2025-175903

Malicious code in transhumanism-blueshift-thuban-geckodriver npm...

EUVD-2025-178502

Malicious code in html-webpack-plugin-wavefunction-local-ora npm...

EUVD-2025-177312

Malicious code in parsec-oauth-jsonp-eslint-config npm...

Malicious code in juno-uglify-js-tethys-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca3b11671ecb29ff8f1e78656346b4fcd45de13ee2feb8648e6425fdce8d720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179846

Malicious code in catch-bash-string-long-catch npm...

EUVD-2025-178018

Malicious code in loop-cosmos-perturbation-andromeda npm...

EUVD-2025-178153

Malicious code in leda-command-aquarius-leda npm...

Malicious code in vuepress-update-canopus-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c0ba2e936fb4ba21ad01bbf840125a863fbb501192f3e88e43e962473e8fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178033

Malicious code in loglevel-exobiology-eslint-config-rate-limiter npm...

EUVD-2025-180408

Malicious code in antd-style-loader-miranda-uninstall npm...

EUVD-2025-178693

Malicious code in good-bundle-scale-grid-load npm...

Malicious code in code-report-cold-iota-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64bf5e8505918bd9d308b0badcac899a832317e13a323ffe00e5666a0329a5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...