EUVD-2025-179110

Malicious code in envconfig-dotenv-safe-middleware-javascript npm...

EUVD-2025-177206

Malicious code in phoebe-sagitta-cosmiconfig-got npm...

EUVD-2025-180127

Malicious code in baryon-perturbation-javascript-pyxis npm...

EUVD-2025-177079

Malicious code in prettier-json-publish-quito npm...

EUVD-2025-178769

Malicious code in ganymede-style-loader-xanthus-javascript npm...

EUVD-2025-179928

Malicious code in byte-assert-finally-hot-sanitize npm...

Malicious code in corvus-javascript-charon-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3ec6da952c946bcdb511cd68067f74a208ceba883ec29ce8802e9ca8e1554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178631

Malicious code in gulp-javascript-carpo-markdown-pdf npm...

EUVD-2025-179803

Malicious code in chai-javascript-pulsar-pyxis npm...

EUVD-2025-179772

Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin npm...

Malicious code in sagitta-javascript-process-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192f71261f706f28676541bb8ebc25a651c6bcd39f95de4ed5e6634af129bbed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177323

Malicious code in parcel-paleontology-configstore-sails npm...

EUVD-2025-178850

Malicious code in fornax-library-eslint-javascript npm...

EUVD-2025-180156

Malicious code in backend-enif-gulp-titan npm...

EUVD-2025-178284

Malicious code in javascript-hyperion-quantumfoam-rate-limiter npm...

MAL-2025-187301 Malicious code in heka-bootstrap-javascript-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79bcabd4095430daa841c61c56b16ee60347e93be2e7f9c25d47d2a34c398593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185464 Malicious code in antares-cluster-ursa-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d84a4b00a7033fc3fa3800a11c657e0a534a6b461ccf0deda2a4f531f6b3468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179899

Malicious code in callback-xanthus-astrochemistry-quantum-computing npm...

EUVD-2025-176627

Malicious code in rimraf-quantum-csv-javascript npm...

Malicious code in postcss-loader-prosthetics-loopback-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f9f63b6e2e1816f62d699a65d1f5b8c88dc6d76c09ded78c5dca4dcc42d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...