EUVD-2025-176747

Malicious code in registry-pipe-version-chariklo npm...

EUVD-2025-179752

Malicious code in chariklo-sirius-relay-leda npm...

EUVD-2025-180467

Malicious code in aldebaran-regulus-bellatrix-prompts npm...

EUVD-2025-178820

Malicious code in fusion-farout-centaurus-metabolomics npm...

EUVD-2025-175547

Malicious code in winston-boson-publish-cluster npm...

Malicious code in mini-css-extract-plugin-meissa-chai-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10f238dac0f01e63a9ce7a8c017e5600af3dee37d61959eac17ea52e027d019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-venus-hydra-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66e971fd14bdefb13ffa29893acb4ce63a7232109a3f4246fc26be70ddc6ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178712

Malicious code in geomorphology-materialize-perturbation-accretion npm...

EUVD-2025-177286

Malicious code in pegasus-kinetic-betelgeuse-selenium npm...

EUVD-2025-176647

Malicious code in reveal-md-sirius-sequelize-nebula npm...

EUVD-2025-177015

Malicious code in promise-interpret-cache-final-process npm...

Malicious code in subduction-exec-redis-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50aee37e6d03929cdab61b680843806f2fe81f55e49f41e75b37f927111ca3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179618

Malicious code in compress-water-cluster-slow-cat npm...

EUVD-2025-175552

Malicious code in wind-phi-pi-zeta-virtualize npm...

EUVD-2025-176423

Malicious code in serialize-final-beta-deserialize-await npm...

EUVD-2025-176532

Malicious code in sandbox-scale-promise-unix-resolve npm...

Malicious code in cat-air-xi-slow-visualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fefed3200aae9b03b2b7c8bfb5a00098ddc2ba15609c9a4286de08a7b8603e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175646

Malicious code in wasat-carina-shelljs-sqlite npm...

EUVD-2025-175793

Malicious code in upgrade-async-forever-nextjs npm...

Malicious code in carina-solis-ultra-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd53fa33a8f12455a525df8cb7c7ad2cdcc564bbfe5f34a826d792195879d9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...