Malicious code in draco-gacrux-carpo-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99af30e309e14cdab037f48e58b659c2e89b47c57ea0ca10d2d97b6c7f47586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-hermes-betelgeuse-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e3e9fa277eb2731d2e5d6b112e3c7dc4fcd0328ded4825757ce1929bf1fad88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179239

Malicious code in draco-terser-webpack-plugin-hermes-corvus npm...

EUVD-2025-179245

Malicious code in draco-convict-carina-superagent npm...

EUVD-2025-175800

Malicious code in update-dorado-farout-draco npm...

Malicious code in draco-quasarjet-envconfig-technocracy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e035ec30a3e6a4899aece76133701fceaa81f84eb4de4b1f3e1a6500c33e84ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179244

Malicious code in draco-cygnus-repository-aurora npm...

EUVD-2025-179241

Malicious code in draco-less-polaris-miranda npm...

EUVD-2025-180062

Malicious code in bioinformatics-draco-alphard-tailwindcss npm...

EUVD-2025-177375

Malicious code in paleoclimatology-draco-backend-triton npm...

EUVD-2025-176489

Malicious code in scripts-geckodriver-jwt-draco npm...

EUVD-2025-178720

Malicious code in geodynamo-draco-cache-thermochronology npm...

MAL-2025-186639 Malicious code in draco-gacrux-carpo-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99af30e309e14cdab037f48e58b659c2e89b47c57ea0ca10d2d97b6c7f47586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-eslint-config-draco-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e217945f165a1f3c90399d422a9537e095a863757767e01869c147571bd5687e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177380

Malicious code in paleobotany-perseus-draco-mensa npm...

EUVD-2025-179824

Malicious code in centaurus-backend-json-draco npm...

EUVD-2025-178699

Malicious code in global-outercore-superagent-draco npm...

EUVD-2025-180036

Malicious code in blazar-draco-mesosphere-mineralogy npm...

EUVD-2025-180200

Malicious code in avior-atlas-draco-websockets npm...

EUVD-2025-180044

Malicious code in biotechnology-draco-webpack-bellatrix npm...