MAL-2025-185464 Malicious code in antares-cluster-ursa-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d84a4b00a7033fc3fa3800a11c657e0a534a6b461ccf0deda2a4f531f6b3468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179694

Malicious code in cluster-tool-quasarjet-meteor npm...

EUVD-2025-176840

Malicious code in quasarjet-cluster-ionosphere-eslint npm...

EUVD-2025-180532

Malicious code in abiogenesis-cluster-astrophysics-epigenetics npm...

Malicious code in gacrux-magellan-cluster-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8027ca7b26fabf039bb2e1967abc63917cc89e3b61e4199161637cf28297e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178691

Malicious code in good-cluster-gamma-fast-finally npm...

EUVD-2025-178460

Malicious code in ichnology-ursa-petrology-cluster npm...

EUVD-2025-179698

Malicious code in cluster-sanitize-resolve-omega-encrypt npm...

EUVD-2025-179316

Malicious code in despina-cluster-asteroid-wormhole npm...

EUVD-2025-175713

Malicious code in virtualize-kernel-string-cluster-mu npm...

EUVD-2025-177499

Malicious code in object-authorize-array-cluster-encrypt npm...

EUVD-2025-179691

Malicious code in cluster-wind-decode-sigma-web npm...

EUVD-2025-179618

Malicious code in compress-water-cluster-slow-cat npm...

EUVD-2025-176690

Malicious code in report-water-view-cluster-socket npm...

EUVD-2025-176892

Malicious code in puppeteer-prettier-stylelint-cluster-delphinus npm...

EUVD-2025-176089

Malicious code in sync-taurus-cluster-webpack npm...

Malicious code in gulp-cluster-hermes-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75be2e9a1f4408daffb548607099533dca2e521294c032121214e57670fec67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177163

Malicious code in pino-virtualreality-cluster-tool npm...

EUVD-2025-179700

Malicious code in cluster-norma-solarnebula-outercore npm...

EUVD-2025-177932

Malicious code in mdx-cluster-oberon-terser npm...