EUVD-2025-178361

Malicious code in io-gulp-apollo-javascript npm...

MAL-2025-188762 Malicious code in polaris-interferometry-sails-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7c5081fdf4d0f7619a6a230546bbed5fa605459a20f2fa63ad703371acc7140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188389 Malicious code in octans-eigenstate-antares-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5827759135609199eeff04fcc96db52baf1dacea83e3ff1eed3eec07d88af2f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189613 Malicious code in spectron-ursa-yonder-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e8934f9f8a84c3ea9257ecf86439131845b5e98b2fb112a7de097e28279bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186023 Malicious code in castor-janus-interferometry-asteroid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7debb1be3eb6e3754c95e06a59277a15e5eb6748a6e5d8a27a83589bac84d37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180430

Malicious code in antares-aether-run-script-pino-pretty npm...

EUVD-2025-175932

Malicious code in toml-airbnb-cosmicsilence-bionics npm...

Malicious code in pino-pretty-kuiperbelt-vulcan-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d01b3bf19da8542bfc975fdfb7a80d55b99366b0702f190de1439f1a90fa5fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175464

Malicious code in xo-quasarjet-publish-npm npm...

Malicious code in eclipse-eridanus-upgrade-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9c1477a3588485280f9a465ef1fc8ff66f1091fe204ff4e7c224e91a7c634b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180154

Malicious code in backend-nashira-rate-limiter-chromedriver npm...

EUVD-2025-180442

Malicious code in altair-async-jabbah-radioastronomy npm...

EUVD-2025-178725

Malicious code in geoarchaeology-superagent-entanglement-semantic-ui npm...

EUVD-2025-176827

Malicious code in quito-config-lightyear-quito npm...

Malicious code in hermes-browserify-alphard-greatfilter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30708db9226924c56d46254043ab17828ef65f1ed22ce45bc6353202adddb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189474 Malicious code in shelljs-fermiparadox-bootes-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8199a85992f315d21ea68c13b0beedab66d67bf10eae645fc8bdbc5cca7e9cca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178770

Malicious code in ganymede-server-test-warp npm...

EUVD-2025-177622

Malicious code in new-transpile-alpha-log-proxy npm...

Malicious code in changelog-tachyon-writable-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755ea8d874ed16fc7b55abed10495d56f1fdf7fc063e05f4fdbef8f1a127f829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mesosphere-kinetic-ignite-tectonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b5b6d11a7de70ebf25c858d96c58eb3b08a382c9a7864827f96f9a791eed7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...