EUVD-2025-176805

Malicious code in radiometric-native-adonis-cygnus npm...

EUVD-2025-176916

Malicious code in publish-thermosphere-native-cosmochemistry npm...

EUVD-2025-177701

Malicious code in native-izar-hugo-start npm...

EUVD-2025-180057

Malicious code in biomimicry-epimetheus-thermochronology-native npm...

EUVD-2025-177696

Malicious code in native-thermosphere-hermes-server npm...

EUVD-2025-177700

Malicious code in native-nashira-seismology-heliophysics npm...

MAL-2025-189958 Malicious code in tool-tailwindcss-cosmology-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024cbd055f4aa386cbd24118ce725f651db3fc425f37acf6453c7e535d8d1d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186680 Malicious code in eclipse-parsec-native-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad95dcc42d1e37b32db227d88bcbb1c29f48527e882181591d17621d99b3b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186384 Malicious code in cross-env-native-centaurus-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6dce8f7485566682baf52e3ddd7d582e7a2d2645f17719277ec2beaf0b8c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176418

Malicious code in server-asteroid-foundation-native npm...

Malicious code in biomimicry-epimetheus-thermochronology-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24a733f84c79b674b30688c847aad3e08c44cf8b40e3bdfa208d9b8983164bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179001

Malicious code in eventhoriz-native-planckscale-cosmochemistry npm...

MAL-2025-188185 Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d49cf4e544253b65eeab4ed53118e7a101dca71f9c8857859e37df800820da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189970 Malicious code in transform-version-sequelize-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0b260696b6e01b16b95ea6411e5bdda668fb587ccda3c63e369cde6cd117d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177695

Malicious code in native-transform-nightmare-polaris npm...

EUVD-2025-177704

Malicious code in native-electron-builder-nashira-tachyon npm...

EUVD-2025-179495

Malicious code in cross-env-vega-native-blazar npm...

EUVD-2025-177803

Malicious code in miranda-native-alphard-browserify npm...

EUVD-2025-177697

Malicious code in native-rollup-plugin-sagitta-tectonophysics npm...

Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d49cf4e544253b65eeab4ed53118e7a101dca71f9c8857859e37df800820da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...