EUVD-2025-176793

Malicious code in rate-limiter-chalk-miranda-cassini npm...

EUVD-2025-178122

Malicious code in less-mineralogy-airbnb-tardigrade npm...

EUVD-2025-176666

Malicious code in resonance-phylogenetics-config-aquarius npm...

EUVD-2025-177139

Malicious code in planetology-neptune-bellatrix-on npm...

Malicious code in xi-moon-star-fire-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362014d5ddaa5609b560cef0f3912766ea90c9f16f84a1fd7f3d1750deb77951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-rollup-plugin-neuromorphic-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842fa808da7937b0ba24f0e329750b9b0226ba8c29e9ca9e50a21c7e0fc4f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176922

Malicious code in publish-oscillation-astrochemistry-spectron npm...

EUVD-2025-179178

Malicious code in electron-postcss-loader-yaml-pyxis npm...

EUVD-2025-175986

Malicious code in test-star-web-zeta-minify npm...

EUVD-2025-180474

Malicious code in aldebaran-biosignature-darkenergy-pavo npm...

EUVD-2025-176382

Malicious code in signal-array-report-reject-cat npm...

Malicious code in barnard-kronos-rate-limiter-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11769664e39034a14dc89a223dfcc785d7f01df045143a545feffaf30d8dc5f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cryonics-blazar-nightwatch-inflation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979ba0303bc9ddf59f3fffdea34a170449c211541be498556e023a17ecc3e919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176365

Malicious code in singularity-restart-helmet-auriga npm...

EUVD-2025-176491

Malicious code in scripts-chalk-nodemon-eigenstate npm...

Malicious code in html-webpack-plugin-multiverse-proteomics-blackhole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04dd975db833fdc723e01450c24356d92668375df821a448e8323c02bf11fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-paleoanthropology-betelgeuse-asthenosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96cd5dd57c26dcfb171d2cac13929816f5c301752a421417e4591099fc8d6eb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178075

Malicious code in lint-less-loader-jekyll-virgo npm...

EUVD-2025-179948

Malicious code in bulma-promise-redgiant-xenobiology npm...

Malicious code in release-it-juno-cypress-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d18c480ca87915de8b545c8543b1908769b9d71711027a718c1af31ffaa6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...