EUVD-2025-178354

Malicious code in ionosphere-terraforming-string-exosphere npm...

EUVD-2025-176184

Malicious code in string-beta-benchmark-scale-file npm...

EUVD-2025-179348

Malicious code in delta-string-enum-thread-uglify npm...

EUVD-2025-177164

Malicious code in pino-remark-string-nestjs npm...

EUVD-2025-179137

Malicious code in encrypt-meta-authenticate-log-string npm...

EUVD-2025-176180

Malicious code in string-deneb-string-spectroscopy npm...

EUVD-2025-178290

Malicious code in java-short-string-java-yaml npm...

MAL-2025-190185 Malicious code in vortex-auth0-string-holography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4b12f620e4fb06f261bdd80d409124bb22468e54001e0012b822d68da3e2741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186657 Malicious code in dynamo-sirius-changelog-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99724af34264220df5ccb753c1103bd7ff76b4df241a798532e0790d5505f7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178377

Malicious code in integer-slow-java-object-string npm...

EUVD-2025-177788

Malicious code in mock-string-simple-final-data npm...

EUVD-2025-176075

Malicious code in tachyon-string-version-sequelize npm...

EUVD-2025-177473

Malicious code in old-string-protected-omega-decode npm...

EUVD-2025-177049

Malicious code in private-easy-string-decrypt-meta npm...

EUVD-2025-178324

Malicious code in izar-string-command-neutronstar npm...

EUVD-2025-176176

Malicious code in string-optimize-class-link-authorize npm...

EUVD-2025-176178

Malicious code in string-eslint-antd-cosmology npm...

EUVD-2025-177423

Malicious code in optimize-uglify-cluster-string-refactor npm...

Malicious code in tachyon-string-version-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0fdfc74478a9afbba79d8616c10a0a83eb890f0f6898259eec91b20c796be2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-string-command-neutronstar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dbcaeebf03806cb0ef5c609388515b241112b004e88e71aeee348b374f64a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...