EUVD-2025-178385

Malicious code in install-fork-mdx-websockets npm...

EUVD-2025-178314

Malicious code in janus-chai-umbriel-install npm...

EUVD-2025-178215

Malicious code in karma-install-spectron-bootes npm...

EUVD-2025-180404

Malicious code in antimatter-slidev-install-void npm...

EUVD-2025-180053

Malicious code in biosignature-install-mocha-vortex npm...

EUVD-2025-180392

Malicious code in apollo-aldebaran-miranda-install npm...

MAL-2025-187374 Malicious code in html-webpack-plugin-hologram-stream-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f786614246d2d9d6432c8d36c1015a7c75b9a2b3c99baa78f244a48ad6eb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177916

Malicious code in meissa-duplex-request-install npm...

MAL-2025-187303 Malicious code in heka-buffer-install-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d173a46b2222709ebde51168c15d95d657b1e4e9bdebe6edb1073438c8838fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178508

Malicious code in html-webpack-plugin-hologram-stream-install npm...

Malicious code in meissa-duplex-request-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc9a8d56bd914325daddf0f1c5c1d6a1d44632b799c474ae33e71c334883104 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in start-io-nightwatch-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e2d1c8c06aa9ace0532a0d3a61dbaeb3cd2e038d997fe0f7dc80a93fd3260a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178943

Malicious code in farout-gatsby-install-ganymede npm...

MAL-2025-187586 Malicious code in jasmine-cypress-gravity-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35dd10a0b5c8d4d8b08bd196f82196d1f827f8aa2da53cab2ce753a17487cad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176217

Malicious code in start-io-nightwatch-install npm...

Malicious code in biosignature-install-mocha-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e28139bf17900b26cfd1c36852cba7aaacebbeb146e4be1d8cbfd36b811698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175389

Malicious code in zooarchaeology-install-aether-extremophile npm...

EUVD-2025-176346

Malicious code in slides-install-dynamo-dotenv-parse-variables npm...

EUVD-2025-176340

Malicious code in slidev-levels-install-jasmine npm...

CVE-2025-8485

An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges during installation of an application...