Malicious code in astrophysics-mesosphere-neptunology-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684bd004536091223ef4c99151f120e9e68cf9d9e4b2583634be658dd965d50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eventhoriz-futurology-event-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c96777a755a8d3822d329b2a9e85b002427023d67467caa7f45bb2d7653b76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180032

Malicious code in blazar-quark-publish-quito npm...

EUVD-2025-179824

Malicious code in centaurus-backend-json-draco npm...

Malicious code in polaris-parcel-ora-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a6e796dc58fc1cd8ce228f6a9f7265536d1cd77c4ce0a8d3d2704dc4e4ac18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179210

Malicious code in easy-link-authorize-simple-view npm...

EUVD-2025-179219

Malicious code in dysonswarm-public-mutation-sagitta npm...

EUVD-2025-179902

Malicious code in callback-typeorm-venus-umbriel npm...

EUVD-2025-179685

Malicious code in cold-cron-object-chi-export npm...

EUVD-2025-175525

Malicious code in xanadu-proxima-transport-hermes npm...

Malicious code in link-sadr-helios-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b26e562ea8107d28edfaaf8d5a3dd188d46f23693a0daaa8dd5f8785b7ac4cb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proteomics-terraforming-exosphere-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08be7f7bd82ea7f6548ae9fb6c2fa590b0f954694b20efc97d5b88d35e932d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176170

Malicious code in stub-scale-alpha-epsilon-optimize npm...

EUVD-2025-175571

Malicious code in weywot-tool-eslint-config-dotenv npm...

EUVD-2025-178572

Malicious code in heka-zenobia-pyxis-mui npm...

EUVD-2025-177798

Malicious code in miranda-spica-sails-superposition npm...

EUVD-2025-180120

Malicious code in bash-xml-transpile-good-catch npm...

EUVD-2025-177027

Malicious code in procyon-procyon-xml-planetology npm...

Malicious code in prettier-stylelint-soap-acamar-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c851c68dc42116afd02c42bc9814743ae9bfc188df787c2b162f447bd138e4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geoarchaeology-hologram-xerxes-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed54989fbcb5736d4c2e1a525981e4144b30d7880a6e267468e8ee8ec1c7f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...