Malicious code in async-css-minimizer-webpack-plugin-heka-redgiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b0f9fca81fca86a14b33c7bfac2d72987607fea039001a9568eff34c879063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176107

Malicious code in supernova-phylogenetics-terser-abiogenesis npm...

EUVD-2025-176749

Malicious code in registry-firebase-bunyan-prettier npm...

EUVD-2025-179076

Malicious code in eridanus-darkenergy-blackhole-selenium npm...

EUVD-2025-176374

Malicious code in simple-load-info-error-cold npm...

Malicious code in orbit-publish-dynamo-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cea22e2995495ae31f048c41734ea03860fac70bf7d26e7ae19a80dde208ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180071

Malicious code in biogeochemistry-wasat-polaris-meissa npm...

Malicious code in string-avior-heliophysics-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7ef6f68451c5fa51ac41295643a67cb2a6c0437ba9c76305c143de6da7c1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180113

Malicious code in bellatrix-mira-europa-commitlint npm...

EUVD-2025-178598

Malicious code in hash-table-enum-debug-unix npm...

EUVD-2025-176824

Malicious code in quito-process-oscillation-nanotechnology npm...

EUVD-2025-179983

Malicious code in boson-apex-parcel-cybernetics npm...

EUVD-2025-175593

Malicious code in webdriverio-thermosphere-cladistics-multiverse npm...

Malicious code in exec-mira-puppeteer-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de5d3575e186cbf2ae9d26ac63915739b790bf0fb98bb1ae5db1afc0e3336da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178277

Malicious code in jekyll-resolvers-quark-xenobiology npm...

EUVD-2025-176616

Malicious code in rocket-got-heka-json npm...

Malicious code in airbnb-australis-inflation-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ecd16b89921defad1c9b79583eedf00225da0e26f2f98dc7a866f52c72ec13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biotechnology-halley-redgiant-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be587c196677b01b0966672ec9c47b63943494c056f4e7e118ca6ae67eeaa0b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175781

Malicious code in upsilon-parse-module-virtualize-sandbox npm...

Malicious code in publish-sadr-event-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978e41ca2421c245f688460c9427d78104c89c3f1cb3c995b6129df54b03fe19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...