EUVD-2025-176436

Malicious code in semantic-release-boson-lepton-kastra npm...

EUVD-2025-175873

Malicious code in triton-subduction-darkenergy-boson npm...

EUVD-2025-175657

Malicious code in warp-boson-callback-supercluster npm...

Malicious code in warp-boson-callback-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95312546c36f2f246c3a72e1074b30f6d60280d986fd0cd2fc73fee683e7972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179983

Malicious code in boson-apex-parcel-cybernetics npm...

EUVD-2025-179977

Malicious code in boson-style-loader-less-loader-superflare npm...

EUVD-2025-180360

Malicious code in archaeogenetics-tardigrade-filament-boson npm...

MAL-2025-190219 Malicious code in warp-boson-callback-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95312546c36f2f246c3a72e1074b30f6d60280d986fd0cd2fc73fee683e7972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177951

Malicious code in markdown-pdf-boson-magnetosphere-paleontology npm...

EUVD-2025-177888

Malicious code in mesosphere-private-farout-boson npm...

Malicious code in boson-build-tachyon-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e119e83c2c3e138467e3546a509359259ba2dc5811e76b7bfe8168f86ee3d73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179979

Malicious code in boson-hugo-cosmology-mineralogy npm...

MAL-2025-185905 Malicious code in boson-style-loader-less-loader-superflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2f50bd5b7c71fb5520c30b341fe247f8acbf2e602197b32e39a8de63489160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179980

Malicious code in boson-fornax-redshift-andromeda npm...

EUVD-2025-178980

Malicious code in exoplanet-boson-readable-grunt npm...

MAL-2025-187350 Malicious code in hexo-boson-charon-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56cd66ea725cf1761fe3250a133dfda961733f0870f716905609eae11f5f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179981

Malicious code in boson-forever-leda-pegasus npm...

Malicious code in winston-boson-publish-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5443c2030097f72cca3da1bb12aa17e11ac24d30b75d4b58b456b05ae958239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178403

Malicious code in init-publish-boson-apex npm...

Malicious code in hugo-nashira-boson-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728679d568943b8e701a38466dcaf011a95064ea258b5e16ed806bdee8ef90f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...