EUVD-2025-179908

Malicious code in callback-elara-hadron-jekyll npm...

EUVD-2025-179900

Malicious code in callback-uranology-fork-rigel npm...

EUVD-2025-179879

Malicious code in carina-solis-ultra-rimraf npm...

EUVD-2025-179873

Malicious code in carpo-release-it-oberon-halley npm...

EUVD-2025-179820

Malicious code in centaurus-gammarayburst-rimraf-glaciology npm...

EUVD-2025-179785

Malicious code in chalk-mira-procyon-schema npm...

EUVD-2025-179777

Malicious code in chalk-stop-indus-module npm...

EUVD-2025-179708

Malicious code in cloud-star-parse-fork-sandbox npm...

EUVD-2025-179707

Malicious code in cloud-user-static-promise-stub npm...

EUVD-2025-179699

Malicious code in cluster-protected-resolve-cloud-refactor npm...

EUVD-2025-179697

Malicious code in cluster-simple-encrypt-cloud-balance npm...

EUVD-2025-180535

Malicious code in abiogenesis-airbnb-supernova-rollup npm...

EUVD-2025-180529

Malicious code in abiogenesis-terraforming-sublimation-supercluster npm...

EUVD-2025-180522

Malicious code in abstract-hash-key-report-load npm...

EUVD-2025-180487

Malicious code in air-epsilon-zeta-key-bundle npm...

Malicious code in websockets-kinetic-janus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b40b5853ee3b4de685feaf1b32ad292ac1711fbe189faa330594cdd0f9238a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subduction-phylogenetics-tachyon-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d23e85fad2795bccb4695d01f55d114917b907a7cc918c35106dd514064a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-cosmicray-accretion-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6898aafe008e3c13932d7554f16b7c52bff08415b7ba39795af33e4b574c3c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180291

Malicious code in astrochemistry-rigel-csrf-cosmicweb npm...

Malicious code in apollo-spinner-solis-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d92bc8e061659af9912ea6207249e0e7d6993cab9fd076885c4a2971c386498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...