Malicious code in hexo-boson-charon-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56cd66ea725cf1761fe3250a133dfda961733f0870f716905609eae11f5f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177142

Malicious code in planetology-biogeochemistry-areology-equinox npm...

EUVD-2025-176362

Malicious code in sirius-blaze-decoherence-scripts npm...

EUVD-2025-179168

Malicious code in element-ui-jabbah-chalk-enceladus npm...

Malicious code in cz-conventional-changelog-blitz-steganography-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 730ff285678049eb66e80db3988bb6718e03f59c281d112d5768eb338419befa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178147

Malicious code in leda-kaus-bellatrix-leda npm...

EUVD-2025-180484

Malicious code in airbnb-arcturus-enif-kastra npm...

EUVD-2025-177591

Malicious code in nightwatch-ophiuchus-request-quito npm...

EUVD-2025-175673

Malicious code in vulcan-asthenosphere-babel-exoplanet npm...

EUVD-2025-176842

Malicious code in quasar-promise-kaus-quito npm...

EUVD-2025-177473

Malicious code in old-string-protected-omega-decode npm...

EUVD-2025-176640

Malicious code in rigel-helios-phoebe-fermion npm...

Malicious code in theta-daemon-moon-char-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2429c5994ed2876f384fed139f93e19399a8f86b62e50a60c67f7bfabdf39a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visualize-cache-web-float-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f7f24dadcead52f45d3b13c1e58579d94e0015bb0a26dfefe06ac153a45caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supercluster-grus-non-blocking-lepton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73d9f265923611595f2bf95140778a1427bfc078db498e7da9874c1aba0f7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178505

Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection npm...

EUVD-2025-176658

Malicious code in rest-version-library-hadron npm...

Malicious code in meteor-cosmochemistry-parsec-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f018f42ff841a03bfe473a2be5b8a5c9547a9ff5fd7162c174cc4bf249906c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180501

Malicious code in adonis-prettier-stylelint-ignite-magellan npm...

Malicious code in lepton-husky-phenomic-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8e5f8a7b80fc50583741a5d4fe7563cb8ec3706c4e734dffb7de609c501073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...