EUVD-2025-180142

Malicious code in bad-transpile-xml-signal-cache npm...

Malicious code in orbit-html-webpack-plugin-xml-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08fb8c907f7e235373242f869cd54f573229f75943e3b713df6ab822fa2142e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176401

Malicious code in shelljs-fermiparadox-bootes-xml npm...

Malicious code in delphinus-xml-acamar-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b8e9afa5e6a50b38ff16824428d62c4d83f0d3059d241cbf0a8cdaa865ff21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177027

Malicious code in procyon-procyon-xml-planetology npm...

EUVD-2025-180120

Malicious code in bash-xml-transpile-good-catch npm...

EUVD-2025-176778

Malicious code in readable-karma-xml-fusion npm...

EUVD-2025-180141

Malicious code in bad-xml-simple-yaml-reject npm...

EUVD-2025-179371

Malicious code in decrypt-xml-compress-moon-file npm...

EUVD-2025-175478

Malicious code in xml-procyon-css-minimizer-webpack-plugin-iota npm...

EUVD-2025-178205

Malicious code in kernel-promise-proxy-xml-pipe npm...

MAL-2025-186532 Malicious code in delphinus-xml-acamar-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59b8e9afa5e6a50b38ff16824428d62c4d83f0d3059d241cbf0a8cdaa865ff21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190399 Malicious code in xml-proxima-rest-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1102d2c7aae26b1696c4937b33f1603f7e0cb43277d6af00d48ae46b44ba92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175702

Malicious code in visualize-object-xml-long-sigma npm...

EUVD-2025-175446

Malicious code in yaml-root-xml-process-proxy npm...

EUVD-2025-179710

Malicious code in cloud-class-stack-xml-runtime npm...

Malicious code in xml-sigma-meta-daemon-delta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9814f634f331ea15ee456dadfc2e7f1468d32fd0e4eb9ef64568b3b1466cec6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175479

Malicious code in xml-phoebe-protoplanetarydisk-magnetar npm...

EUVD-2025-180258

Malicious code in async-registry-build-xml npm...

EUVD-2025-177472

Malicious code in old-stub-xml-deploy-wind npm...