EUVD-2025-178215

Malicious code in karma-install-spectron-bootes npm...

EUVD-2025-176651

Malicious code in reveal-md-cosmos-apex-bootstrap npm...

EUVD-2025-179954

Malicious code in build-geoarchaeology-mutation-library npm...

EUVD-2025-178330

Malicious code in isostasy-meteor-passport-npm npm...

EUVD-2025-178316

Malicious code in janus-avior-superagent-ichnology npm...

EUVD-2025-177434

Malicious code in optimize-cache-static-orchestrate-import npm...

Malicious code in mui-cluster-antares-nucleosynthesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a79c5eb88dbf060771545f41472a61811c8817947e70dc0fc5cc821841efb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180406

Malicious code in antimatter-exoplanetology-convict-update npm...

Malicious code in ceres-redis-umbra-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c562522cf6b72f448c78de70d7ff9552bde4eb19fa9ebfb50cab599b1bf80c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177984

Malicious code in magellan-blaze-archaeometry-slides npm...

EUVD-2025-178972

Malicious code in exoplanetology-command-heka-mensa npm...

EUVD-2025-178107

Malicious code in library-biosignature-bionics-mocha npm...

EUVD-2025-178198

Malicious code in key-orchestrate-promise-mu-bad npm...

Malicious code in earth-omega-epsilon-error-compress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947db336c7842edab7a9506dd0ad7679dd256b4f6583d8acf5c916ea9a792645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-hermes-betelgeuse-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e3e9fa277eb2731d2e5d6b112e3c7dc4fcd0328ded4825757ce1929bf1fad88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178652

Malicious code in grep-pi-final-interpret-cloud npm...

Malicious code in cache-publish-decoherence-astroinformatics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8c45af9f1f787eae1ffc6a38584c3e59ad89115ffe14aaaa705a8994e0708e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176351

Malicious code in sirius-spectron-webdriver-mutation-glaciology npm...

Malicious code in user-reject-good-code-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2032c72f458597a497d1a878ab45c562a45d885ad37a471669b14d2c004b3d68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-foundation-interstellarmedium-neutrino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5817b434d706349468a310dede18cde35b6db193c3fcbd9b01ef1a7fbbb22c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...