EUVD-2025-179128

Malicious code in enif-wavefunction-phoebe-kastra npm...

EUVD-2025-177516

Malicious code in nu-interpret-container-grep-bad npm...

EUVD-2025-176582

Malicious code in run-script-taphonomy-interstellarmedium-antimatter npm...

EUVD-2025-180430

Malicious code in antares-aether-run-script-pino-pretty npm...

EUVD-2025-179995

Malicious code in bootstrap-cluster-fornax-link npm...

EUVD-2025-179477

Malicious code in cryptography-webdriver-manager-schema-test npm...

EUVD-2025-178079

Malicious code in lint-auth0-joviology-jovian npm...

EUVD-2025-180504

Malicious code in adonis-child-process-pegasus-repository npm...

EUVD-2025-179080

Malicious code in equinox-xerxes-hapi-gravity npm...

EUVD-2025-177272

Malicious code in permission-big-omega-alert-phi npm...

EUVD-2025-177618

Malicious code in nextjs-html-webpack-plugin-express-gemini npm...

Malicious code in umbriel-leda-pipe-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbced70f13ff299b1492268d064d3da9078e4feed78b8d6225d5a2cb765ff9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176144

Malicious code in sun-bad-assert-secure-protected npm...

EUVD-2025-178839

Malicious code in framework-baryon-install-iota npm...

EUVD-2025-179859

Malicious code in castor-janus-interferometry-asteroid npm...

Malicious code in meteor-command-warp-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8178667f4cc481bfbb71a61023a72f4c670447ad57a44be40c3aab68de2cac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177681

Malicious code in nebula-deneb-winston-apex npm...

EUVD-2025-177149

Malicious code in pipe-simple-virtualize-void-stack npm...

MAL-2025-186363 Malicious code in cosmos-void-procyon-nanotechnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73a0510ca46ea00a42be60632daf30bd38602e918f2c42645970d900f23db68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190347 Malicious code in writable-lint-helmet-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d5a4b6d4af71eeb4c819c5aeed09820f02c8309f1b35be0b403965813dd281d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...