EUVD-2025-179327

Malicious code in dependencies-galaxy-install-module npm...

EUVD-2025-178738

Malicious code in gemini-sagitta-cordelia-aether npm...

Malicious code in umbriel-spica-rate-limiter-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24a2c3e8a9bab387f482012d72bbd73ca8104bd9ac31e0303a0cd6bd10374ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175670

Malicious code in vulcan-nestjs-pm2-biohacking npm...

EUVD-2025-180126

Malicious code in baryon-sublimation-apollo-shelljs npm...

EUVD-2025-180159

Malicious code in babel-ophiuchus-mira-bellatrix npm...

EUVD-2025-175567

Malicious code in weywot-wezen-cryovolcano-auriga npm...

EUVD-2025-180036

Malicious code in blazar-draco-mesosphere-mineralogy npm...

EUVD-2025-176587

Malicious code in route-proxy-alpha-export-monitor npm...

EUVD-2025-177312

Malicious code in parsec-oauth-jsonp-eslint-config npm...

Malicious code in commitlint-config-angular-nodejs-carpo-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff6171864c8dd888f734cabf61ae22f26f3868044dd59eb396032310cdbcf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-areology-dorado-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531a5a33c302063443322b56d40422675ab57fff80775b6ee7e266f4bb0b7165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-middleware-mongoose-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0a7212482567b4ff70ad523ee9502116475db634fa180bfd66e4025e91737e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177961

Malicious code in mantle-private-mineralogy-morgan npm...

EUVD-2025-175438

Malicious code in yonder-mineralogy-ablation-achernar npm...

EUVD-2025-177941

Malicious code in materialize-docusaurus-oauth-centaurus npm...

EUVD-2025-176720

Malicious code in relay-halley-ophiuchus-public npm...

EUVD-2025-176629

Malicious code in rimraf-middleware-mysql-pavo npm...

EUVD-2025-176836

Malicious code in query-betelgeuse-nebula-dotenv-safe npm...

Malicious code in taurus-configstore-delphinus-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb641a5bd2c178e2edebd041165405025d149fbff5933904010bfd420071e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...