EUVD-2025-180169

Malicious code in axios-envconfig-antimatter-xenos npm...

Malicious code in alphard-mui-gatsby-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb3005addfce76c80633ae60df973892cc0a170579a5315c529dcf35c96059a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178730

Malicious code in geoarchaeology-ethology-command-envconfig npm...

EUVD-2025-177135

Malicious code in planetology-virgo-archaeometry-envconfig npm...

MAL-2025-189665 Malicious code in steganography-aether-on-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a82bcf9484d0efd576c49a8f70274e7b0f9d424b9ac8f7f2c024d1aa3911a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186772 Malicious code in envconfig-dotenv-safe-middleware-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb6d3787cd8e826342e1a35672bcd802bf1f5e183672c196cde0b5b219fdc13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envconfig-apollo-dependencies-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6efee11ebc8382fbece0fc1803392ff0837ae4af2341841d4b417793e252fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176440

Malicious code in selenology-dione-envconfig-avior npm...

EUVD-2025-180446

Malicious code in alphard-mui-gatsby-envconfig npm...

EUVD-2025-179015

Malicious code in europa-betelgeuse-scorpius-envconfig npm...

MAL-2025-188740 Malicious code in planetology-virgo-archaeometry-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a306eb5c4f40ca9eed5e5358af762509f337a8152ea0a8021b334ad4454ef58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177144

Malicious code in planckscale-ora-envconfig-antares npm...

EUVD-2025-114447

Malicious code in docusaurus-envconfig-equinox-eridanus npm...

EUVD-2025-123934

Malicious code in passport-sedna-envconfig-gridsome npm...

EUVD-2025-113071

Malicious code in gridsome-geckodriver-envconfig-nebula npm...

EUVD-2025-123583

Malicious code in polaris-equinox-envconfig-neptune npm...

EUVD-2025-122836

Malicious code in readable-nodemon-envconfig-fomalhaut npm...

EUVD-2025-113830

Malicious code in europa-mira-winston-envconfig npm...

EUVD-2025-123895

Malicious code in pegasus-envconfig-wasat-supervisor npm...

EUVD-2025-114022

Malicious code in envconfig-wasat-bootstrap-rocket npm...