EUVD-2025-178576

Malicious code in heka-mdx-kaus-indus npm...

EUVD-2025-178972

Malicious code in exoplanetology-command-heka-mensa npm...

EUVD-2025-178580

Malicious code in heka-buffer-holography-subduction npm...

EUVD-2025-177637

Malicious code in neuromorphic-venus-aquarius-heka npm...

EUVD-2025-179548

Malicious code in cosmicray-draco-interferometry-heka npm...

EUVD-2025-178577

Malicious code in heka-markdownlint-rollup-node-config npm...

EUVD-2025-175736

Malicious code in venus-nextjs-heka-solis npm...

EUVD-2025-180273

Malicious code in async-css-minimizer-webpack-plugin-heka-redgiant npm...

Malicious code in nodemon-heka-wezen-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c295e465036b78eff0cd11ff9a8e7e1894c08d139ec57d8043ea93e45a02fdfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicray-draco-interferometry-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e5c6911b77d8405e431ac6d9229df453c50c824c01099cc54520e00d557257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178574

Malicious code in heka-puppeteer-phoebe-meteor npm...

Malicious code in heka-markdownlint-rollup-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3918091bf1dccaa7a82585cf98bba21f487de7dad3e092c4d5f4c7b1b3c7e9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187303 Malicious code in heka-buffer-install-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d173a46b2222709ebde51168c15d95d657b1e4e9bdebe6edb1073438c8838fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176689

Malicious code in repository-heka-nestjs-mesosphere npm...

EUVD-2025-178581

Malicious code in heka-bootstrap-javascript-loopback npm...

EUVD-2025-178871

Malicious code in forever-heka-polaris-elektra npm...

EUVD-2025-180226

Malicious code in auth0-andromeda-heka-cross-env npm...

Malicious code in venus-nextjs-heka-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce32a190eba19f5be21cabd7b1722d51a5f1046b2d93dd087e5957927c771cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177721

Malicious code in mysql-heka-version-saturnology npm...

EUVD-2025-178582

Malicious code in heka-antares-vulcan-commitizen npm...