EUVD-2025-175437

Malicious code in yonder-rollup-dynamo-build npm...

EUVD-2025-179956

Malicious code in build-enceladus-supernova-joviology npm...

EUVD-2025-180222

Malicious code in auth0-scripts-slides-build npm...

Malicious code in stop-chalk-build-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12304bce2d2adca285ac9ea833f6164df53f2794ac72a2e3661ee2b7f9968c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-build-auth0-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f27094bea7cf9d6b3712a3714081b3884123be343a197952c08d6ad1b940f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179950

Malicious code in bulma-equinox-build-nova npm...

EUVD-2025-179954

Malicious code in build-geoarchaeology-mutation-library npm...

EUVD-2025-179957

Malicious code in build-eleventy-deneb-gemini npm...

EUVD-2025-177152

Malicious code in pipe-parallax-build-kinetic npm...

EUVD-2025-177685

Malicious code in nebula-build-auth0-mui npm...

EUVD-2025-180225

Malicious code in auth0-astrometry-build-decoherence npm...

MAL-2025-185925 Malicious code in build-eleventy-deneb-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60f9254d7e112b0cafa3f70a3f75b052568cb6aba5c5b36c30ab0558c2b06b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176031

Malicious code in tectonic-pino-pretty-build-elara npm...

MAL-2025-186517 Malicious code in deimos-koa-build-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a36c41fcb310eff78aafc5e8df244c1040a53162533a3e6f7026cd926873e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176010

Malicious code in terser-isostasy-build-avior npm...

EUVD-2025-179958

Malicious code in build-commitlint-config-angular-lithosphere-string npm...

EUVD-2025-175719

Malicious code in virgo-build-equinox-init npm...

EUVD-2025-179918

Malicious code in cache-mensa-leda-build npm...

EUVD-2025-178474

Malicious code in hyperion-build-style-loader-lynx npm...

EUVD-2025-176204

Malicious code in stop-chalk-build-less-loader npm...