Malicious Package

Overview link-uglify-js-fermiparadox-auth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

EUVD-2025-176117

Malicious code in superflare-xenon-semantic-ui-fermiparadox npm...

EUVD-2025-176448

Malicious code in seismology-paleomagnetism-fermiparadox-spectroscopy npm...

EUVD-2025-176401

Malicious code in shelljs-fermiparadox-bootes-xml npm...

EUVD-2025-177859

Malicious code in meteor-fermiparadox-pino-mysql npm...

EUVD-2025-178807

Malicious code in futurology-fermiparadox-parsec-publish npm...

EUVD-2025-178675

Malicious code in graphql-npm-soap-fermiparadox npm...

EUVD-2025-179286

Malicious code in docusaurus-mdx-ionosphere-fermiparadox npm...

EUVD-2025-178928

Malicious code in fermiparadox-helios-pyxis-astrometry npm...

EUVD-2025-179169

Malicious code in element-ui-fermiparadox-carpo-orogeny npm...

EUVD-2025-177208

Malicious code in phoebe-petrology-sirius-fermiparadox npm...

EUVD-2025-178083

Malicious code in link-uglify-js-fermiparadox-auth npm...

EUVD-2025-176366

Malicious code in singularity-kuiperbelt-loopback-fermiparadox npm...

EUVD-2025-176907

Malicious code in pulsar-dotenv-safe-redis-fermiparadox npm...

EUVD-2025-176787

Malicious code in rate-limiter-tethys-fermiparadox-cosmos npm...

EUVD-2025-178927

Malicious code in fermiparadox-mini-css-extract-plugin-andromeda-mongodb npm...

EUVD-2025-179553

Malicious code in cosmiconfig-fermiparadox-parsec-forever npm...

EUVD-2025-176136

Malicious code in superagent-nodejs-darkenergy-fermiparadox npm...

EUVD-2025-178929

Malicious code in fermiparadox-graviton-brane-membrane npm...

MAL-2025-187207 Malicious code in graphql-npm-soap-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56716e434cd1c5a44faa2761e4607685f3dc1bfd3de906c84be90f3ba243a05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...