EUVD-2025-177923

Malicious code in mechatronics-borealis-tardigrade-init npm...

EUVD-2025-180307

Malicious code in asthenosphere-auth-andromeda-gacrux npm...

Malicious code in telesto-nova-zenobia-sublimation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da48811bc870cbdc1b6a57bd71b295cbf3774c4c96f0277cc3c7519f7ba101b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-postcss-loader-bunyan-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8535f78567524d8b9c6926e20120a445a55b1ab1f7a69b7db5f380940c2fd10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176909

Malicious code in pulsar-apollo-decoherence-public npm...

EUVD-2025-176626

Malicious code in rimraf-webdriver-manager-impulse-dione npm...

Malicious code in perseus-cosmogenic-spectron-webdriver-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58a08ce2390b39ba0775e86569c351f7f8c1ac7780c89872374334fa4a05289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-boson-charon-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56cd66ea725cf1761fe3250a133dfda961733f0870f716905609eae11f5f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177142

Malicious code in planetology-biogeochemistry-areology-equinox npm...

EUVD-2025-176362

Malicious code in sirius-blaze-decoherence-scripts npm...

EUVD-2025-179168

Malicious code in element-ui-jabbah-chalk-enceladus npm...

Malicious code in cz-conventional-changelog-blitz-steganography-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 730ff285678049eb66e80db3988bb6718e03f59c281d112d5768eb338419befa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178147

Malicious code in leda-kaus-bellatrix-leda npm...

EUVD-2025-180484

Malicious code in airbnb-arcturus-enif-kastra npm...

EUVD-2025-177591

Malicious code in nightwatch-ophiuchus-request-quito npm...

EUVD-2025-175673

Malicious code in vulcan-asthenosphere-babel-exoplanet npm...

EUVD-2025-176842

Malicious code in quasar-promise-kaus-quito npm...

EUVD-2025-177473

Malicious code in old-string-protected-omega-decode npm...

EUVD-2025-176640

Malicious code in rigel-helios-phoebe-fermion npm...

Malicious code in theta-daemon-moon-char-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2429c5994ed2876f384fed139f93e19399a8f86b62e50a60c67f7bfabdf39a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...