EUVD-2025-176160

Malicious code in sublimation-archaeoastronomy-browserify-build npm...

EUVD-2025-179982

Malicious code in boson-build-tachyon-solis npm...

EUVD-2025-176763

Malicious code in redshift-build-geodynamo-hyperion npm...

EUVD-2025-177314

Malicious code in parsec-build-nconf-miranda npm...

MAL-2025-188197 Malicious code in nebula-build-auth0-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f27094bea7cf9d6b3712a3714081b3884123be343a197952c08d6ad1b940f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179954

Malicious code in build-geoarchaeology-mutation-library npm...

EUVD-2025-179950

Malicious code in bulma-equinox-build-nova npm...

EUVD-2025-177685

Malicious code in nebula-build-auth0-mui npm...

Malicious code in nebula-build-auth0-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f27094bea7cf9d6b3712a3714081b3884123be343a197952c08d6ad1b940f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180222

Malicious code in auth0-scripts-slides-build npm...

EUVD-2025-176031

Malicious code in tectonic-pino-pretty-build-elara npm...

Malicious code in stop-chalk-build-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12304bce2d2adca285ac9ea833f6164df53f2794ac72a2e3661ee2b7f9968c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175437

Malicious code in yonder-rollup-dynamo-build npm...

EUVD-2025-177152

Malicious code in pipe-parallax-build-kinetic npm...

EUVD-2025-179957

Malicious code in build-eleventy-deneb-gemini npm...

EUVD-2025-177063

Malicious code in prettier-stylelint-soap-acamar-build npm...

EUVD-2025-179956

Malicious code in build-enceladus-supernova-joviology npm...

EUVD-2025-180225

Malicious code in auth0-astrometry-build-decoherence npm...

MAL-2025-186517 Malicious code in deimos-koa-build-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a36c41fcb310eff78aafc5e8df244c1040a53162533a3e6f7026cd926873e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185925 Malicious code in build-eleventy-deneb-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60f9254d7e112b0cafa3f70a3f75b052568cb6aba5c5b36c30ab0558c2b06b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...