Malicious code in slides-public-alphard-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7de09261f3144209c646b5fac5d76328042839266e5a56a0daceac2a505688 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-config-jovian-middleware-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08e1a70125c98d783c4675a920d9eefc7bf5a6891ae90b0e858fd9a3a898c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176371

Malicious code in singularitarianism-europa-spectroscopy-lithosphere npm...

Malicious code in public-process-wind-debug-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ea636a7e3c1a51019c949018a9314e3ce0b0c56b8da96ba2cb60538a3f50127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176382

Malicious code in signal-array-report-reject-cat npm...

EUVD-2025-176860

Malicious code in quark-aquarius-weywot-prettier-stylelint npm...

EUVD-2025-176827

Malicious code in quito-config-lightyear-quito npm...

EUVD-2025-179549

Malicious code in cosmicray-andromeda-registry-npm npm...

EUVD-2025-179874

Malicious code in carpo-mdx-comet-hyperion npm...

EUVD-2025-177254

Malicious code in perseus-metalsmith-acamar-iota npm...

Malicious code in materialize-dotenv-safe-sublimation-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefa120636cfd6f73b190f56220380ce77849e4a839a8559d1106992e1aa7d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-darkmatter-lint-staged-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac68762e33089807478b221c74a906d070cef10fe0699ea1243ff9090ef6d249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179061

Malicious code in eris-umbra-dotenv-scorpius npm...

EUVD-2025-180403

Malicious code in apex-antares-polaris-cosmology npm...

EUVD-2025-176089

Malicious code in sync-taurus-cluster-webpack npm...

EUVD-2025-178673

Malicious code in graviton-command-global-axios npm...

EUVD-2025-178585

Malicious code in hawkingradiation-sadr-buffer-heliophysics npm...

Malicious code in umbra-farout-barnard-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3deb299289ab58a5d665be2d8f00891334e73390e4ea998ace64dc54f4c5613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175493

Malicious code in xerxes-auth-jekyll-ionosphere npm...

Malicious code in speleology-ganymede-halley-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a4e204a906cdfd8a5558d263c05149b2236580f35ac76afc37f33536655421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...