EUVD-2025-179298

Malicious code in development-xerxes-dagda-repository npm...

EUVD-2025-180389

Malicious code in apollo-development-cressida-umbriel npm...

EUVD-2025-178953

Malicious code in express-standard-development-astrometry npm...

EUVD-2025-178772

Malicious code in ganymede-publish-development-janus npm...

EUVD-2025-177930

Malicious code in mdx-development-elara-stratosphere npm...

EUVD-2025-179304

Malicious code in development-outercore-neptune-singularitarianism npm...

EUVD-2025-179598

Malicious code in configstore-hermes-development-update npm...

EUVD-2025-180134

Malicious code in barnard-octans-development-async npm...

EUVD-2025-177224

Malicious code in phenomic-prettier-stylelint-development-library npm...

EUVD-2025-176722

Malicious code in relay-development-update-semantic-release npm...

EUVD-2025-179277

Malicious code in dorado-development-troposphere-futurology npm...

EUVD-2025-179309

Malicious code in development-child-process-npm-socketio npm...

EUVD-2025-175628

Malicious code in wavefunction-optimize-css-assets-webpack-plugin-development-ursa npm...

EUVD-2025-176499

Malicious code in schema-wasat-development-bellatrix npm...

EUVD-2025-179301

Malicious code in development-rollup-pipe-koa npm...

EUVD-2025-179404

Malicious code in darkenergy-config-pulsar-development npm...

EUVD-2025-179306

Malicious code in development-kinetic-mocha-equinox npm...

MAL-2025-186388 Malicious code in crust-mui-development-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b16dfeb9cbb104d60dfcaa311925c95ada246aa8e45fc1c2e109c04f8e8b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180091

Malicious code in betelgeuse-development-heliophysics-cordelia npm...

Malicious code in darkenergy-config-pulsar-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8854a12b87261a151a85d4e343a5d654007ddfc614096e8cc336e831d3deaa61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...