Malicious code in import-float-omega-user-eta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b9d72ef4a5adf2927a1577844ade2d0903be998fe38061cbfa62e1633027df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180366

Malicious code in archaeoastronomy-prettier-plugin-markdown-backend-archaeoastronomy npm...

Malicious code in pm2-dorado-lithosphere-gravitationalwave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0bf0122bf53ffd695ca74ef50913f10924601962d70f7e2efee47d07ce23d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179949

Malicious code in bulma-interferometry-mesosphere-jabbah npm...

EUVD-2025-179786

Malicious code in chalk-interferometry-telesto-ophiuchus npm...

Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9921124b23b8c3333632e1a5ad8852823bbc42e2f37bc4ab4272265763d84cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175694

Malicious code in void-oberon-supernova-package npm...

EUVD-2025-175625

Malicious code in wavefunction-procyon-archaeoastronomy-uranology npm...

EUVD-2025-175546

Malicious code in winston-gridsome-oortcloud-pegasus npm...

Malicious code in mongodb-kastra-gridsome-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e827819cb34d09b58770afb4d907c8cfe540dad27e0303f9827fff00ee4bdb82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178904

Malicious code in final-daemon-route-boolean-permission npm...

EUVD-2025-178265

Malicious code in joviology-heka-accretion-speleology npm...

EUVD-2025-178731

Malicious code in geoarchaeology-archaeogenetics-spectron-webdriver-chromedriver npm...

EUVD-2025-179805

Malicious code in chai-got-pino-commitizen npm...

EUVD-2025-178633

Malicious code in grus-superposition-pegasus-antd npm...

EUVD-2025-176336

Malicious code in slidev-rigel-uninstall-dependencies npm...

EUVD-2025-179956

Malicious code in build-enceladus-supernova-joviology npm...

EUVD-2025-178974

Malicious code in exoplanet-xerxes-interstellarmedium-octans npm...

Malicious code in grus-private-quark-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16e13dec01cfb2b4640caf03ff44b0bc81c7783aa0631bc664936909d63ed3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sandbox-scale-promise-unix-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ddcf410fd06e2ea2f2269a667bfebbb5ab12de14aad2c9f47ef13f257ca503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...