EUVD-2025-177930

Malicious code in mdx-development-elara-stratosphere npm...

EUVD-2025-179304

Malicious code in development-outercore-neptune-singularitarianism npm...

EUVD-2025-176725

Malicious code in reject-report-water-thread-parse npm...

EUVD-2025-179055

Malicious code in error-root-long-sigma-interpret npm...

EUVD-2025-176777

Malicious code in readable-ophiuchus-markdownlint-colors npm...

EUVD-2025-177271

Malicious code in permission-emulate-cloud-beta-stub npm...

EUVD-2025-176766

Malicious code in redis-epimetheus-jabbah-apex npm...

EUVD-2025-179598

Malicious code in configstore-hermes-development-update npm...

EUVD-2025-176318

Malicious code in soap-odin-config-sails npm...

EUVD-2025-178200

Malicious code in key-kernel-transpile-test-yaml npm...

EUVD-2025-178460

Malicious code in ichnology-ursa-petrology-cluster npm...

Malicious code in bunyan-resonance-mensa-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65863ee55838a0a6002f037f8899a14e638e0c1328dce784f74dfa7763be464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-odin-config-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5fb11eb83b83b17a16cb7ae6c6f075d0c88452e612dcd5a1b07ea5cc8eab15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176417

Malicious code in server-astrometry-ceres-aether npm...

EUVD-2025-175752

Malicious code in user-boolean-info-decode-try npm...

EUVD-2025-176223

Malicious code in standard-thuban-commitlint-config-angular-got npm...

Malicious code in unuk-eris-paleontology-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9329444c67fce09de6e11e7173d8332d45be1f00838ad069f07ca80098b44820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compile-catch-gamma-encode-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8545b272f2cc1d5247f5d8fc850fd0c53e182c3852a6ab567e2c4e0085d24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177909

Malicious code in meissa-pavo-asthenosphere-aurora npm...

Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc399df1baa583fe9c5b3c3d19473cebd1498ab6c0de46cdc1ef484368df6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...