EUVD-2025-180337

Malicious code in arcturus-venus-loop-cressida npm...

EUVD-2025-179904

Malicious code in callback-parallax-slides-metabolomics npm...

EUVD-2025-178313

Malicious code in janus-dagda-query-ceres npm...

EUVD-2025-176567

Malicious code in sadr-proxima-uninstall-native npm...

Malicious code in interface-stack-mock-execute-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc20e53d07d6acddd739f4e433e4d8a4bb9b9679bbf5027a87b77495cb36177b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-carpo-carpo-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13b35cab92cb87cd2a1275e1e555ba5cd6cc2d672f9915764840e26cd51e296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178338

Malicious code in iota-scripts-phoebe-geckodriver npm...

EUVD-2025-180453

Malicious code in alpha-view-grep-abstract-pipe npm...

Malicious code in css-loader-mui-wasat-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53cad67075a8415d525e1cafbcd4ef14fbb3971d78c9c0a1085f10f86fb472d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terraforming-nebula-cordelia-virtualreality (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c189c82723ce5a436c8482e4184626a3def10827f7f0f3bd4cb2a84f806b4040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175650

Malicious code in warp-ora-duplex-jekyll npm...

Malicious code in radiant-on-oscillation-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ca9d06180b7ce0f8167aa6796479c6ce559c18461c3ecc78a266ab88af199d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179781

Malicious code in chalk-pulsar-native-xerxes npm...

EUVD-2025-178920

Malicious code in figures-betelgeuse-ethology-magellan npm...

EUVD-2025-179897

Malicious code in callisto-cors-ini-puppeteer npm...

EUVD-2025-178897

Malicious code in finally-stack-error-cold-assert npm...

EUVD-2025-178899

Malicious code in finally-function-boolean-refactor-runtime npm...

EUVD-2025-178037

Malicious code in log-delta-daemon-finally-minify npm...

EUVD-2025-178987

Malicious code in execute-char-char-stub-serialize npm...

MAL-2025-188631 Malicious code in perseus-query-halley-selenology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e110c96b540f872d651ac47fdfce3f49caac30f01ee4f9c559fcf0f20d03f753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...