Malicious code in meteor-command-warp-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8178667f4cc481bfbb71a61023a72f4c670447ad57a44be40c3aab68de2cac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177681

Malicious code in nebula-deneb-winston-apex npm...

EUVD-2025-177149

Malicious code in pipe-simple-virtualize-void-stack npm...

EUVD-2025-177073

Malicious code in prettier-plugin-markdown-exoplanet-saturnology-frontend npm...

EUVD-2025-179126

Malicious code in entanglement-australis-event-leda npm...

EUVD-2025-175854

Malicious code in typeorm-xanthus-solis-soap npm...

EUVD-2025-175749

Malicious code in user-refactor-cluster-transpile-eta npm...

EUVD-2025-177685

Malicious code in nebula-build-auth0-mui npm...

EUVD-2025-179175

Malicious code in elektra-bellatrix-neutronstar-spinner npm...

Malicious code in callisto-europa-relay-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8337c1aab47dce5ea62275961be6d7adbca72d2db41dead4570adfb04582fd5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175859

Malicious code in typeorm-kuiperbelt-miranda-tachyon npm...

EUVD-2025-176069

Malicious code in taphonomy-phoebe-castor-terraforming npm...

EUVD-2025-179925

Malicious code in byte-nu-monitor-module-static npm...

EUVD-2025-180512

Malicious code in acamar-xenon-eslint-magellan npm...

EUVD-2025-177521

Malicious code in npm-equinox-bootstrap-baryon npm...

EUVD-2025-178947

Malicious code in extremophile-slidev-radioastronomy-coronalmassejection npm...

Malicious code in nodejs-radioastronomy-tailwindcss-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55993d0565f8d92a812004ecc5cbd614a5e9d4d25497d89d5a0002bd114cc88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-non-blocking-html-webpack-plugin-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c96a0cb89808b6a9d97752e052ed1ed344076a7cfc56315ad0186b572be54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176574

Malicious code in sadr-corvus-janus-eclipse npm...

Malicious code in leda-jsonp-dependencies-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5371fbf950c99d96b08240fa9f1145f24d3a4062427ce516eacafbaebe39885c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...