EUVD-2025-180202

Malicious code in authorize-sigma-stub-sun-mock npm...

EUVD-2025-177062

Malicious code in prettier-stylelint-zenobia-loop-paleomagnetism npm...

Malicious code in impulse-node-sass-private-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b4e69a7b42d75448eca0a1127eaef99dea1d90d48f5d139d8a3ce16a5bbb13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176282

Malicious code in spawn-auth0-less-loader-phoenix npm...

EUVD-2025-178408

Malicious code in init-charon-terser-upgrade npm...

EUVD-2025-176628

Malicious code in rimraf-playwright-morgan-norma npm...

EUVD-2025-175810

Malicious code in unuk-eris-paleontology-spectron npm...

EUVD-2025-176028

Malicious code in tectonophysics-levels-zenith-karma npm...

Malicious code in titan-fusion-virgo-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4501f11a2deae04085746254e3f775d5d1da1b5a90819236beb332f1930c3d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in book-data-short-index-object (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c5c6f6d40efd3bef72387801d8203eac1923bd99c9bf12dc04fdb66c1ee20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179082

Malicious code in equinox-sass-loader-global-nestjs npm...

Malicious code in subscription-asteroid-paleoanthropology-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 918073041e550b5c69ffe7cd13c869d13b870526af47b743e03a6b1ae9f81efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176124

Malicious code in supercluster-vega-ceres-meissa npm...

EUVD-2025-175390

Malicious code in zooarchaeology-gammarayburst-blueshift-vuepress npm...

EUVD-2025-177202

Malicious code in phoebe-tectonophysics-nestjs-dependencies npm...

EUVD-2025-178701

Malicious code in global-gridsome-oauth-supervisor npm...

EUVD-2025-175965

Malicious code in thermochronology-metabolomics-semantic-ui-aquarius npm...

EUVD-2025-179737

Malicious code in child-process-loglevel-elektra-eleventy npm...

Malicious code in catch-bash-mu-daemon-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31096c13f4aea6a88a542856fb5bca32be9585f83bbf33f7d5e4134637ecdbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biosignature-enif-element-ui-biohacking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4715241285965588427f15c1ffe35a84f94a2a86f96acc208d839b45622dc284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...