EUVD-2025-177108

Malicious code in polaris-publish-vortex-jekyll npm...

EUVD-2025-177518

Malicious code in nu-double-import-theta-old npm...

EUVD-2025-177288

Malicious code in pegasus-filament-meteor-impulse npm...

EUVD-2025-177590

Malicious code in nightwatch-procyon-stream-docusaurus npm...

EUVD-2025-178432

Malicious code in index-error-cold-earth-encode npm...

Malicious code in deneb-biosignature-taphonomy-glaciology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 826d1c2ca5b616a8f35e0fd137fffc6f302955dd4f7b5785761a78ec8078fb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180339

Malicious code in arcturus-run-script-hydrogeology-gatsby npm...

EUVD-2025-178502

Malicious code in html-webpack-plugin-wavefunction-local-ora npm...

EUVD-2025-177296

Malicious code in pavo-auth-sedna-polaris npm...

EUVD-2025-178594

Malicious code in hawkingradiation-aether-mesosphere-loopback npm...

EUVD-2025-178333

Malicious code in iota-zephyr-nova-octans npm...

EUVD-2025-180488

Malicious code in air-easy-dog-float-interface npm...

EUVD-2025-179115

Malicious code in enum-parse-protected-kernel-refactor npm...

EUVD-2025-178097

Malicious code in lightyear-cors-quasar-procyon npm...

EUVD-2025-179161

Malicious code in emulate-earth-lambda-iota-mock npm...

Malicious code in radiometric-native-adonis-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a905c6fbd44ffe868d328f759bc5e0ebe4637155e3c9cfa9f4b6ec27256292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179049

Malicious code in eslint-config-apex-hermes-zooarchaeology npm...

EUVD-2025-178815

Malicious code in fusion-postcss-loader-supercluster-biohacking npm...

EUVD-2025-178386

Malicious code in install-enif-blitz-supervisor npm...

Malicious code in epimetheus-sagitta-cosmicweb-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bc7aa72b27d6ff25deddb6571fb73ec8eb566c3846eddf42956cf6fb0fa976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...