EUVD-2025-177576

Malicious code in node-config-hexo-version-indus npm...

EUVD-2025-177662

Malicious code in neptune-indus-tachyon-phoenix npm...

Malicious code in orbit-luna-indus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed9d865a656c770e023fe92f67cb64974da1cbe3fb0141834bfffd8c86df97b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179575

Malicious code in cordelia-indus-cors-dotenv-safe npm...

EUVD-2025-179777

Malicious code in chalk-stop-indus-module npm...

MAL-2025-188567 Malicious code in parsec-barnard-indus-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf67cd6c7d272b18c189b6a696b3683ce668ba0405360dd3850a0a83726854d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177315

Malicious code in parsec-barnard-indus-vuepress npm...

Malicious code in indus-virgo-publish-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5e343e832dcd592b7407aaea23128dadf679e0c78cc297bbd29ff497ab04dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-aurora-zenith-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee9d82155772729a89d4891311cc4f51a4cca870e1ed4af8058e7900dfc6f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180460

Malicious code in algol-apollo-indus-extremophile npm...

EUVD-2025-177415

Malicious code in orbit-luna-indus-xanthus npm...

Malicious code in chalk-stop-indus-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bb8e1129a1d5a199fd42030542e91c8c409a534084d9519532cc4057e92cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175470

Malicious code in xo-indus-procyon-indus npm...

EUVD-2025-178423

Malicious code in indus-neptune-typeorm-io npm...

EUVD-2025-176066

Malicious code in tardigrade-indus-baryon-axios npm...

EUVD-2025-178424

Malicious code in indus-farout-carpo-astrobiology npm...

EUVD-2025-178425

Malicious code in indus-cybernetics-prettier-plugin-markdown-pavo npm...

EUVD-2025-178422

Malicious code in indus-reveal-md-gulp-neptune npm...

EUVD-2025-175860

Malicious code in typeorm-indus-restart-update npm...

MAL-2025-186991 Malicious code in firebase-indus-biogeochemistry-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2f7d463efef4ff5f61869e121b0565321a7327a631f0dec3c6b17ce11bace4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...