EUVD-2025-178635

Malicious code in grus-prosthetics-stream-prettier-plugin-markdown npm...

Malicious code in stream-sequelize-writable-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fdf4cd8fedeb6040c6b2bae5b893aedc5f019fba5512dc35e0ebc2a03cc4b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179751

Malicious code in charon-stream-fornax-dotenv npm...

EUVD-2025-179583

Malicious code in convict-spawn-gravitationalwave-stream npm...

EUVD-2025-176188

Malicious code in stream-redis-bellatrix-oscillation npm...

EUVD-2025-176189

Malicious code in stream-polaris-json-ursa npm...

EUVD-2025-175721

Malicious code in virgo-arcturus-hydra-stream npm...

EUVD-2025-179489

Malicious code in cryonics-cypress-stream-lithosphere npm...

EUVD-2025-179811

Malicious code in ceres-morgan-stream-singularitarianism npm...

EUVD-2025-177797

Malicious code in miranda-stream-resolvers-convict npm...

EUVD-2025-176191

Malicious code in stream-indus-dendrochronology-run-script npm...

EUVD-2025-176525

Malicious code in sanitize-sed-transpile-analyze-sandbox npm...

Malicious code in capella-cypress-stream-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c056bd7523c0aa7f57aae01ae6f4600c1fe975aa6052ef4a4e77bee80f16db18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189686 Malicious code in stream-polaris-json-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b30bf02b8ab08397ef907793ad4f30bed9073496e1c9a9008a9455e4d891f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187225 Malicious code in greatfilter-venus-stream-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2688ecd07f82607da45c4ce63b5e64aab9f8a5cd170454bb2ba16f0dbd1b5a8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-procyon-stream-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e497e4e46a9d7a57d90c0c65f94d4cbb5d2a38b38ddbc06eec016cc45c40b6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178657

Malicious code in greatfilter-venus-stream-halley npm...

EUVD-2025-177458

Malicious code in on-cladistics-exosphere-stream npm...

EUVD-2025-176186

Malicious code in stream-yildun-bootes-neutrino npm...

Malicious code in convict-spawn-gravitationalwave-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d86882e0076d80ab9827d708aa6534aa225eee0e3afeb4af5dcf612c62f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...