EUVD-2025-178433

Malicious code in index-chi-grep-nu-wind npm...

EUVD-2025-177065

Malicious code in prettier-stylelint-astrobiology-loopback-sirius npm...

EUVD-2025-180264

Malicious code in async-lynx-lithosphere-telesto npm...

EUVD-2025-176469

Malicious code in sed-sigma-encrypt-catch-warn npm...

EUVD-2025-175777

Malicious code in uranology-blueshift-kuiperbelt-aether npm...

EUVD-2025-176822

Malicious code in radiant-cross-env-neutrino-local npm...

EUVD-2025-177791

Malicious code in mock-easy-tree-long-cloud npm...

Malicious code in plutology-meteor-xerxes-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb5bc61e9eac228156b339e33b38872ab4c63538b4ef99c2269a8dd85462dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176725

Malicious code in reject-report-water-thread-parse npm...

EUVD-2025-178655

Malicious code in grep-dog-function-stub-tree npm...

Malicious code in code-report-cold-iota-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64bf5e8505918bd9d308b0badcac899a832317e13a323ffe00e5666a0329a5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177902

Malicious code in mensa-koa-castor-typeorm npm...

EUVD-2025-177710

Malicious code in nashira-materialize-publish-galaxy npm...

EUVD-2025-177975

Malicious code in magellan-vega-phoenix-hydrogeology npm...

EUVD-2025-176392

Malicious code in short-shell-data-private-bash npm...

EUVD-2025-175724

Malicious code in view-visualize-nu-shell-small npm...

EUVD-2025-178573

Malicious code in heka-relay-grunt-gammarayburst npm...

Malicious code in rocket-fomalhaut-sirius-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344f2bc058eebc6954eb5e9126619426a4e49a9670f2df757ea7590314e6af3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-phoenix-janus-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bfaac5b13ee3615038f009dd8cc5708e1733b833f6322bcab514c56246a82d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biotechnology-corvus-phoebe-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7d89363aa906934aa21323a9e5cbbcbac669a622cb76d058c5bc4794c9529f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...