EUVD-2025-180382

Malicious code in apollo-redgiant-kardashevscale-pino npm...

Malicious code in cressida-prettier-plugin-markdown-pulsar-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b47904204a0330a6ee88de485827845d0e3e0d640f5d1de7eda6c95644ce085d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175725

Malicious code in view-omicron-unix-compress-authorize npm...

EUVD-2025-175749

Malicious code in user-refactor-cluster-transpile-eta npm...

EUVD-2025-180297

Malicious code in astrobiology-loopback-hermes-duplex npm...

EUVD-2025-179487

Malicious code in cryonics-magellan-bionics-tardigrade npm...

EUVD-2025-176232

Malicious code in standard-apollo-tardigrade-perseus npm...

EUVD-2025-176371

Malicious code in singularitarianism-europa-spectroscopy-lithosphere npm...

EUVD-2025-179958

Malicious code in build-commitlint-config-angular-lithosphere-string npm...

EUVD-2025-179489

Malicious code in cryonics-cypress-stream-lithosphere npm...

EUVD-2025-180276

Malicious code in async-cluster-await-io npm...

Malicious code in public-eclipse-wavefunction-entanglement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ced94b4a1f127cb891036fa56d9ebde3bdfaf8aaab19aa745eef548a9208c41d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integer-web-key-resolve-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94aad90f40c30ad2202a9b22aa2607757388041740bb1902fc51611a74dbef91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176993

Malicious code in protected-cat-mu-file-async npm...

Malicious code in react-bootstrap-await-vortex-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe2df41fe79aa7d62e4bc1574ba393debd5f95cf7b85fa3cba47c2287f69cc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180177

Malicious code in awk-minify-minify-proxy-omicron npm...

EUVD-2025-178333

Malicious code in iota-zephyr-nova-octans npm...

EUVD-2025-175481

Malicious code in xml-ganymede-blackhole-chalk npm...

Malicious code in sagitta-frontend-eslint-config-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c2500c73f9e15b142f13f572a687f151b1f6a8e3eb54fb96cbd58ce242f02f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-archaeoastronomy-graviton-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8899ed7471e985e84376208e83bc674a3f185c1387225341796fa134880c727e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...