EUVD-2025-178650

Malicious code in grid-mu-cloud-signal-cat npm...

EUVD-2025-179036

Malicious code in eslint-plugin-mutation-geomorphology-cladistics npm...

MAL-2025-185456 Malicious code in andromeda-impulse-quasarjet-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e410a4fcb58b2811102f923002858586bc7bc659b7f0faf932ba2c0a1456af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176640

Malicious code in rigel-helios-phoebe-fermion npm...

MAL-2025-189477 Malicious code in shelljs-zephyr-ariel-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c2accf9123b899ae3b61cfa4e55abfbf468be76f8c6634bec3eebe014f7187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190107 Malicious code in ursa-hawkingradiation-pulsar-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44783e0629c201822fb799a347c530d77eda8b2138bb131f0087271ddeb17fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179114

Malicious code in enum-proxy-sun-omicron-nu npm...

MAL-2025-188495 Malicious code in package-uninstall-scorpius-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a74311a498dc54021eb8645f2068701b117d54e9b84519e6d9a51fc46143595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178135

Malicious code in less-antimatter-slides-phoebe npm...

EUVD-2025-179368

Malicious code in deimos-concurrently-outercore-browserify npm...

EUVD-2025-179484

Malicious code in cryonics-publish-dactyl-pyxis npm...

Malicious code in fast-table-import-async-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b7711575f733c9e98b03e3824ef5b1c29085d432948d8c4df9b454932c4f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177344

Malicious code in paleontology-sublimation-europa-backend npm...

EUVD-2025-179002

Malicious code in eventhoriz-futurology-event-chariklo npm...

EUVD-2025-175837

Malicious code in umbra-iota-graphql-callback npm...

Malicious code in docusaurus-thermosphere-aquarius-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cff65c97dcfbf5b82d994578654a3152ecc637488be528804a85e738be615d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178197

Malicious code in key-refactor-finally-optimize-pipe npm...

EUVD-2025-180508

Malicious code in achernar-hermes-centauri-module npm...

EUVD-2025-176233

Malicious code in standard-altair-izar-sync npm...

MAL-2025-187975 Malicious code in meissa-polaris-pulsar-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55be14a3895b75568b753b0dbb7e610f2c1ea7657cf1dbb55f0d70db002b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...