EUVD-2025-116658

Malicious code in antares-uglify-js-child-process-galaxy npm...

EUVD-2025-114893

Malicious code in cosmos-proxima-xerxes-uglify-js npm...

EUVD-2025-115874

Malicious code in bulma-ultra-meteor-uglify-js npm...

EUVD-2025-121052

Malicious code in uglify-js-nuxtjs-karma-atlas npm...

EUVD-2025-121063

Malicious code in uglify-js-apollo-cosmos-karma npm...

Malicious code in atlas-uglify-js-dependencies-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c01fe1d39d88bf4cd5a8c1ea901406f329f7b4aba7ecd8aabf15ba9c3ada4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122931

Malicious code in quito-eris-markdown-pdf-uglify-js npm...

Malicious code in sequelize-nashira-rigel-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59d6fb63fb5556a47a76185951f64c80c5d8364358472ed927bf91c9fa3fdcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-cli-uglify-js-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed63cfb1fb82bc628b16d127c52caa67e626fb4c898671692e4b6fb1d5e614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116570

Malicious code in apollo-ursa-tailwindcss-uglify-js npm...

EUVD-2025-123667

Malicious code in pino-uglify-js-uninstall-cli npm...

EUVD-2025-120459

Malicious code in wezen-uglify-js-stop-regulus npm...

EUVD-2025-120192

Malicious code in xml-ursa-uglify-js-zenobia npm...

EUVD-2025-121059

Malicious code in uglify-js-child-process-meissa-firebase npm...

EUVD-2025-124766

Malicious code in mongoose-firebase-local-uglify-js npm...

MAL-2025-146102 Malicious code in perseus-ora-spawn-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147718 Malicious code in scorpius-uglify-js-grunt-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7bf0478efc3b2a9cce6d79cf93e4ccee6ad6fb3c74baa90e251c8477bf18ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121045

Malicious code in uglify-js-spectron-colors-server npm...

MAL-2025-148874 Malicious code in uglify-js-hexo-zenobia-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934967d7940b8009db69a6f57f4813c107293a76d651412f11a90960aed262c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139444 Malicious code in antares-uglify-js-child-process-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101a83ce1b47d6ca195fd753246395dd6d373fd39ac9b2d8551b942b35b0297f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...