EUVD-2025-178496

Malicious code in hugo-nashira-boson-passport npm...

Malicious code in fornax-socketio-ganymede-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf81223eb44037f720c7f81236de5d3bf785a23ec6a4b48c754958e420b7afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177922

Malicious code in mechatronics-boson-quasarjet-wolf npm...

EUVD-2025-175547

Malicious code in winston-boson-publish-cluster npm...

EUVD-2025-175873

Malicious code in triton-subduction-darkenergy-boson npm...

Malicious code in biosignature-rollup-polaris-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee28aaf0ab1598c2cecd4a41de5df103b572fd7b814c701bf0175aa1cc32f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177951

Malicious code in markdown-pdf-boson-magnetosphere-paleontology npm...

MAL-2025-188650 Malicious code in phenomic-avior-greatfilter-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b201e815b3fed6dff5cf2c8c8dd8e975795b4c086f7ae845825da2bd13da55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186814 Malicious code in eris-callback-boson-cosmicsilence (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a197876be7cdffaa146516c71ade6fb43a8bf1e1cc1b4350b8a5ea0d8bb5a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179979

Malicious code in boson-hugo-cosmology-mineralogy npm...

EUVD-2025-175657

Malicious code in warp-boson-callback-supercluster npm...

EUVD-2025-179983

Malicious code in boson-apex-parcel-cybernetics npm...

Malicious code in warp-boson-callback-supercluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95312546c36f2f246c3a72e1074b30f6d60280d986fd0cd2fc73fee683e7972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178532

Malicious code in hexo-boson-charon-framework npm...

EUVD-2025-178980

Malicious code in exoplanet-boson-readable-grunt npm...

EUVD-2025-179982

Malicious code in boson-build-tachyon-solis npm...

EUVD-2025-179980

Malicious code in boson-fornax-redshift-andromeda npm...

EUVD-2025-178403

Malicious code in init-publish-boson-apex npm...

EUVD-2025-180049

Malicious code in biosignature-rollup-polaris-boson npm...

EUVD-2025-177648

Malicious code in neptune-webdriver-manager-vuetify-boson npm...