EUVD-2025-197822

Malicious code in node-calculator-feea npm...

Malicious code in node-calculator-e0b2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba31a08143476ba0a942f7ec99141d6f27fa71a15d43c886d14f1c1fcff6c642 The package node-calculator-e0b2 was found to contain malicious code...

EUVD-2025-197824

Malicious code in node-calculator-ecec npm...

EUVD-2025-178743

Malicious code in gemini-hydrogeology-panspermia-standard npm...

Malicious code in venus-phoebe-heliophysics-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c557360705a7b782a60c0b57663064bd571c2258f3504b22e00fdd91e865c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176862

Malicious code in quantumfoam-wavefunction-lacerta-singularity npm...

EUVD-2025-177134

Malicious code in playwright-asthenosphere-norma-cassini npm...

EUVD-2025-176467

Malicious code in sedimentology-ablation-meteor-xml npm...

Malicious code in halley-pm2-semantic-ui-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207baa0abd8ece63fe60c3b6ed72245a1fbd0ab7acbb419f0f280f5e15470fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179101

Malicious code in epigenetics-kinetic-prompts-taphonomy npm...

EUVD-2025-176815

Malicious code in radiant-toml-primatology-dotenv-safe npm...

EUVD-2025-177017

Malicious code in promise-hawkingradiation-paleoclimatology-prompts npm...

EUVD-2025-177568

Malicious code in node-sass-blitz-paleobotany-decoherence npm...

EUVD-2025-176583

Malicious code in run-script-sagitta-pulsar-alphard npm...

EUVD-2025-179964

Malicious code in browserify-seismology-vega-quito npm...

EUVD-2025-178888

Malicious code in flare-backend-jsonp-orogeny npm...

Malicious code in modiov-khan-avcafivaid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fa94e87d73c216ebfb4394a898a713981b9e7138d7c1a4b1064fb2d46fef12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a1d1012cace5fee6c9b048af25b1e2f11ef2eb369189e15a1d544eac9ace63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kat-ibufadaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9712d7d51ace948ada3d80f10205b20611022512eb8e2ebcddad0cf7b5b26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182420 Malicious code in imodiov-kufni-acumnacffgteafgrdcaavfhaebfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6e9192a1f7b0759bcb577daacd5a88259a6361350d2d2445cdde6f5fbccee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...