EUVD-2025-176899

Malicious code in pulsar-run-script-process-io npm...

EUVD-2025-179822

Malicious code in centaurus-browserify-run-script-interferometry npm...

EUVD-2025-180513

Malicious code in acamar-prettier-stylelint-run-script-hapi npm...

Malicious code in redshift-run-script-chai-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5286f36483bbe7228cd4a81c89c18519248a77be151e2d05f127fcabe320b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176760

Malicious code in redshift-run-script-chai-koa npm...

EUVD-2025-180341

Malicious code in arcturus-nuxtjs-cordelia-run-script npm...

EUVD-2025-175734

Malicious code in version-aquarius-run-script-nova npm...

EUVD-2025-176863

Malicious code in quantumfoam-run-script-troposphere-halley npm...

MAL-2025-185549 Malicious code in arcturus-run-script-hydrogeology-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85308b7f547a69be0ec866ce936c922952149183b16feab778b8f5b68c64d58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-run-script-nashira-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7361ddf24b24372d3f7d805c9eb58615f9f41cd1281ea692b6ebc64d1b3c543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113126

Malicious code in got-run-script-proxima-await npm...

EUVD-2025-112914

Malicious code in hapi-run-script-draco-hermes npm...

EUVD-2025-121687

Malicious code in sqlite-run-script-transform-cordelia npm...

EUVD-2025-122381

Malicious code in run-script-charon-rigel-koa npm...

EUVD-2025-111772

Malicious code in less-non-blocking-run-script-xanthus npm...

Malicious code in got-run-script-proxima-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa04a34a8e56c5c772f14564f419592876e974653aa8279f0dfc3c83c0256b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120568

Malicious code in webdriver-mocha-run-script-kastra-dactyl npm...

EUVD-2025-122374

Malicious code in run-script-mysql-antd-csv npm...

MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-run-script-html-webpack-plugin-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a3cc4cd04277d76318a794fe020a7ea9edc9d4d5148a26b7f40fcbf27f72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...