Malicious code in despina-nashira-iota-biohacking (npm)

The package despina-nashira-iota-biohacking was found to contain malicious code. --- Credit: OpenSSF source...

Malicious Package

Overview cz-conventional-changelog-nashira-blitz-terser is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview eclipse-nightwatch-nashira-janus is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

EUVD-2025-177711

Malicious code in nashira-dotenv-parse-variables-gulp-lynx npm...

Malicious code in virgo-async-astrobiology-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e656b9f20e0942219d52184b8fc5ea29dce1db22e46b4ed79b479c6566d1bbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176168

Malicious code in style-loader-node-sass-graphql-nashira npm...

EUVD-2025-179517

Malicious code in cosmos-yonder-grunt-nashira npm...

EUVD-2025-177561

Malicious code in node-sass-nashira-xerxes-css-minimizer-webpack-plugin npm...

EUVD-2025-177712

Malicious code in nashira-betelgeuse-astrometry-callback npm...

MAL-2025-188172 Malicious code in nashira-materialize-publish-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6830ac46dd9d24333dbc5f8c74a61c9334671ab3093941bb7008dc605d1cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187386 Malicious code in hugo-nashira-boson-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728679d568943b8e701a38466dcaf011a95064ea258b5e16ed806bdee8ef90f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-nashira-wavefunction-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c4b64c33f7412381a1d500dcafadddadb2f2c59a0d9bf14721c9e7e3ff107f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180070

Malicious code in biogeochemistry-xenos-nashira-petrology npm...

EUVD-2025-180238

Malicious code in auriga-parcel-soap-nashira npm...

Malicious code in fomalhaut-nashira-webdriverio-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a034cd14a877e2c5d7412544ed3aa5a725a051aa47414ff2e337b9637217fcd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177141

Malicious code in planetology-borealis-nashira-celeste npm...

EUVD-2025-176032

Malicious code in tectonic-pegasus-axios-nashira npm...

MAL-2025-188290 Malicious code in nightwatch-nashira-wavefunction-perturbation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c4b64c33f7412381a1d500dcafadddadb2f2c59a0d9bf14721c9e7e3ff107f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186365 Malicious code in cosmos-yonder-grunt-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ec61cd9ccaae23473fa62ba89bdc0cd77a1cf4c2ad714655057db11196e10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187885 Malicious code in lynx-nashira-heliophysics-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a45c0b6f2ad44fec8b8cd437328119eff54f462c614ebca18f5aa3de04082b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...