EUVD-2025-121062

Malicious code in uglify-js-blaze-rocket-dorado npm...

Malicious code in celeste-cli-uglify-js-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed63cfb1fb82bc628b16d127c52caa67e626fb4c898671692e4b6fb1d5e614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-uglify-js-gemini-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8912171b68a913feaa979fa26a61e925d98cb34760af2bac8aa1baf35290f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124766

Malicious code in mongoose-firebase-local-uglify-js npm...

EUVD-2025-121048

Malicious code in uglify-js-quito-ursa-fomalhaut npm...

EUVD-2025-124729

Malicious code in morgan-uglify-js-resolvers-xanadu npm...

Malicious code in perseus-ora-spawn-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124203

Malicious code in nuxtjs-uglify-js-loopback-comet npm...

EUVD-2025-120192

Malicious code in xml-ursa-uglify-js-zenobia npm...

EUVD-2025-121716

Malicious code in spinner-semantic-release-nuxtjs-polaris npm...

EUVD-2025-124614

Malicious code in nconf-ceres-css-minimizer-webpack-plugin-nuxtjs npm...

EUVD-2025-120782

Malicious code in version-uglify-js-draco-dotenv npm...

EUVD-2025-121059

Malicious code in uglify-js-child-process-meissa-firebase npm...

EUVD-2025-114893

Malicious code in cosmos-proxima-xerxes-uglify-js npm...

EUVD-2025-122050

Malicious code in sequelize-nashira-rigel-uglify-js npm...

MAL-2025-146102 Malicious code in perseus-ora-spawn-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120766

Malicious code in virgo-nuxtjs-achernar-spectron-webdriver npm...

EUVD-2025-121776

Malicious code in spica-airbnb-pino-nestjs npm...

MAL-2025-140230 Malicious code in bulma-ultra-meteor-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdfd1deafb4b573097ef89a887d9922514d7aceab4f029d5853fcc750934733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148874 Malicious code in uglify-js-hexo-zenobia-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934967d7940b8009db69a6f57f4813c107293a76d651412f11a90960aed262c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...