Malicious code in zephyr-ganymede-fomalhaut-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 400d2c278a0302d618f65ae002e9c82387d30f08742bf4fd5af0b01c9082a40f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-callisto-semantic-ui-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d65af75f6acff48d55a94e31741a5da41d9e26f8b607169d254ab4d96271cb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178804

Malicious code in futurology-taurus-celeste-css-loader npm...

EUVD-2025-177208

Malicious code in phoebe-petrology-sirius-fermiparadox npm...

EUVD-2025-175791

Malicious code in upgrade-hexo-gulp-cosmogenic npm...

EUVD-2025-176695

Malicious code in report-epsilon-socket-beta-sudo npm...

EUVD-2025-176293

Malicious code in solarnebula-await-superposition-aquarius npm...

EUVD-2025-175493

Malicious code in xerxes-auth-jekyll-ionosphere npm...

Malicious code in airbnb-mini-css-extract-plugin-centauri-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827f6e45379c72e896fa2c8a42159e2ada3a7553eef28d5b9d72873afc1ac74f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178723

Malicious code in geochemistry-jsonp-virtualreality-primatology npm...

EUVD-2025-176787

Malicious code in rate-limiter-tethys-fermiparadox-cosmos npm...

EUVD-2025-178907

Malicious code in file-decompress-gamma-wind-object npm...

EUVD-2025-178053

Malicious code in load-float-omega-char-mock npm...

EUVD-2025-180396

Malicious code in apex-postgres-procyon-zenobia npm...

EUVD-2025-178282

Malicious code in javascript-start-halley-eclipse npm...

Malicious code in biotechnology-testcafe-cygnus-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2756c79805bc9cf70d1ae96a1a009309dc842d56437d620e90834924c1731c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kappa-awk-deploy-simulate-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72ecfbadfec940172b0dbe19e5b6c4d4e3e2ddfd4b92f95aa5c3cdb00e3126e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175629

Malicious code in wavefunction-crust-interstellarmedium-bootstrap npm...

Malicious code in pulsar-dotenv-safe-redis-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c008e0e78c252ad80dc2cdf02ef146655bf01aa8cc20e278fc2892651e7ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolve-code-sun-sanitize-fast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdbdcc8fb619c74fdb9b14089fa86dadcd27a20aad53d18bd359bd1f2d0664b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...