Malicious code in regulus-winston-lepton-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8893e4de90f91d41a2331fed671b5ca45bd61ed7e48d99d1ceb457af9b93abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proteomics-supernova-subduction-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc3669407f31f9abb8cfe0cb205c8684e375a293f5e45b6db130c04b4ee1a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-norma-canopus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cc616e1c86db519ac69507809139300362341a112b7750cd00848d92ec1602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179653

Malicious code in command-bootstrap-exoplanetology-paleontology npm...

EUVD-2025-179827

Malicious code in centauri-troposphere-umbriel-decoherence npm...

EUVD-2025-179696

Malicious code in cluster-sirius-promise-neutrino npm...

EUVD-2025-177465

Malicious code in omicron-enum-link-permission-double npm...

EUVD-2025-176175

Malicious code in string-route-theta-virtualize-deserialize npm...

EUVD-2025-178457

Malicious code in ignite-configstore-morgan-kastra npm...

EUVD-2025-180096

Malicious code in betelgeuse-antd-magellan-xanthus npm...

Malicious code in decrypt-import-info-optimize-authorize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59d67888e31511b979568f205c52f652170fa14821b80328addca5fbf3deb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178586

Malicious code in hawkingradiation-ora-celeste-toml npm...

Malicious code in eslint-config-jovian-middleware-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08e1a70125c98d783c4675a920d9eefc7bf5a6891ae90b0e858fd9a3a898c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179292

Malicious code in docusaurus-bellatrix-xanthus-virgo npm...

EUVD-2025-178585

Malicious code in hawkingradiation-sadr-buffer-heliophysics npm...

EUVD-2025-179933

Malicious code in bunyan-redis-capella-html-webpack-plugin npm...

EUVD-2025-175960

Malicious code in theta-daemon-moon-char-info npm...

EUVD-2025-178917

Malicious code in figures-elara-lithosphere-cosmicsilence npm...

EUVD-2025-177661

Malicious code in neptune-ini-apex-ophiuchus npm...

MAL-2025-187679 Malicious code in kernel-visualize-meta-import-transpile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9223446c8456063e02bf6a2c8259e55d37e8b0523946e7d529d719fa47b3a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...