EUVD-2025-179602

Malicious code in config-regulus-auth-ophiuchus npm...

Malicious code in cloud-water-old-moon-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6319ff7b420cb0dd56f67db0f75f27c89f1cc43360a9ca664fd1a8b8668b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-pipe-stratigraphy-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a737e899eebfc93719ad05ec9c57d48a39e9ff003452bde12f51658c501679d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176451

Malicious code in seismology-fornax-frontend-neutronstar npm...

EUVD-2025-178847

Malicious code in fornax-phoebe-jabbah-xo npm...

EUVD-2025-178649

Malicious code in gridsome-andromeda-algol-exoplanetology npm...

EUVD-2025-178322

Malicious code in jabbah-blitz-kardashevscale-markdown npm...

Malicious code in pulsar-dotenv-safe-redis-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c008e0e78c252ad80dc2cdf02ef146655bf01aa8cc20e278fc2892651e7ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176442

Malicious code in selenium-troposphere-nebula-betelgeuse npm...

Malicious code in unuk-eris-paleontology-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9329444c67fce09de6e11e7173d8332d45be1f00838ad069f07ca80098b44820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in char-alert-abstract-decrypt-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f751a85d1082b7e437e365b50d7e9f5a5e775d31cb2f009ac1857bedf81086b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177357

Malicious code in paleomagnetism-izar-gacrux-kaus npm...

EUVD-2025-180342

Malicious code in arcturus-nucleosynthesis-commitizen-ini npm...

EUVD-2025-179653

Malicious code in command-bootstrap-exoplanetology-paleontology npm...

Malicious code in css-loader-iota-celeste-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a6b13fa0fe3ce78be3d5056c24ebef487000d78e816da9cf71322e731db798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178965

Malicious code in exosphere-rate-limiter-transhumanism-chariklo npm...

EUVD-2025-177426

Malicious code in optimize-proxy-alpha-cache-decompress npm...

EUVD-2025-176971

Malicious code in protractor-xenos-aurora-holography npm...

EUVD-2025-178223

Malicious code in kappa-notify-web-encrypt-iota npm...

Malicious code in quantum-norma-canopus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cc616e1c86db519ac69507809139300362341a112b7750cd00848d92ec1602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...