EUVD-2025-175627

Malicious code in wavefunction-parallax-jovian-jasmine npm...

Malicious code in leda-gemini-saturnology-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f5b569b71df46bf686285180ffd3ef0e011173804742d78524bd68db8bc38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177363

Malicious code in paleoecology-cygnus-jovian-telesto npm...

EUVD-2025-177014

Malicious code in promise-jovian-cli-nightwatch npm...

EUVD-2025-178273

Malicious code in jovian-asteroid-tectonophysics-bootstrap npm...

EUVD-2025-178272

Malicious code in jovian-development-meissa-configstore npm...

EUVD-2025-178269

Malicious code in jovian-postgres-webdriver-mocha-await npm...

EUVD-2025-178268

Malicious code in jovian-sass-loader-native-cassini npm...

EUVD-2025-178079

Malicious code in lint-auth0-joviology-jovian npm...

EUVD-2025-178997

Malicious code in exec-antimatter-jovian-postgres npm...

EUVD-2025-178150

Malicious code in leda-gemini-saturnology-jovian npm...

EUVD-2025-179127

Malicious code in enif-zooarchaeology-jovian-extremophile npm...

EUVD-2025-177405

Malicious code in orogeny-fermion-mui-jovian npm...

EUVD-2025-176936

Malicious code in public-jovian-solarnebula-lacerta npm...

Malicious code in lint-auth0-joviology-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc97a55208b7ece6a83f42b44139024e81c21bdc1b43050810b785e84bf514f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179187

Malicious code in elara-jovian-dorado-biogeochemistry npm...

EUVD-2025-178270

Malicious code in jovian-nodemon-winston-andromeda npm...

EUVD-2025-179261

Malicious code in dotenv-safe-jovian-astroinformatics-ablation npm...

EUVD-2025-178271

Malicious code in jovian-less-loader-draco-wasat npm...

Malicious code in jovian-sass-loader-native-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225deea9531693f6cbd7d6edd3656452b2959b26fd0b8a748ec2e08d0dbcbb98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...