Malicious code in browserify-cosmiconfig-testcafe-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfff5428f531d2e4567d0a397bb6f4305ee3665f448b346444bc1f04b258b597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176034

Malicious code in technosignature-wezen-blitz-blazar npm...

Malicious code in unuk-mui-antares-neuromorphic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1ec361b50b97c7e7b7ab5f49059900ab7878e6ffac9899246ded9fccc19d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-kinetic-janus-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b40b5853ee3b4de685feaf1b32ad292ac1711fbe189faa330594cdd0f9238a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179190

Malicious code in elara-dysonswarm-sirius-pyxis npm...

EUVD-2025-178099

Malicious code in library-update-commitizen-jabbah npm...

Malicious code in blueshift-exoplanet-buffer-primatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d143c1c5b2aab61f831840778fd5711d8bdbdd3009b39af1830df9580dbe9f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177709

Malicious code in nashira-winston-aurora-gatsby npm...

EUVD-2025-176158

Malicious code in sublimation-private-technosignature-futurology npm...

EUVD-2025-177238

Malicious code in perturbation-technosignature-pino-cosmicsilence npm...

EUVD-2025-179236

Malicious code in duplex-init-parcel-test npm...

EUVD-2025-180520

Malicious code in abstract-mu-kappa-authenticate-decode npm...

EUVD-2025-178798

Malicious code in gacrux-magellan-cluster-version npm...

EUVD-2025-179870

Malicious code in cassini-hawkingradiation-rocket-sedna npm...

EUVD-2025-178801

Malicious code in gacrux-dorado-impulse-test npm...

EUVD-2025-179736

Malicious code in child-process-stratigraphy-subduction-node-sass npm...

Malicious code in multiverse-perseus-ignite-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e2dc25fda56b320b22f7aaa8af3bf5680fb5d97128cb6cfe22f2435a8dfc067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protoplanetarydisk-thermochronology-zenobia-multiverse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a758e62d1f343445dc19b0a564a18702d6a739a33dbcd10ffa4647fb31d66c37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179224

Malicious code in dysonswarm-apex-graphql-module npm...

Malicious code in eclipse-parsec-native-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad95dcc42d1e37b32db227d88bcbb1c29f48527e882181591d17621d99b3b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...