EUVD-2025-177241

Malicious code in perturbation-css-loader-loopback-uninstall npm...

EUVD-2025-176355

Malicious code in sirius-react-bootstrap-ignite-pegasus npm...

EUVD-2025-176615

Malicious code in rocket-graviton-aurora-blueshift npm...

EUVD-2025-178760

Malicious code in gatsby-fornax-nuxtjs-vuetify npm...

EUVD-2025-177453

Malicious code in on-xanthus-panspermia-kastra npm...

EUVD-2025-180090

Malicious code in betelgeuse-frontend-titan-yildun npm...

EUVD-2025-178331

Malicious code in isostasy-loopback-docusaurus-inflation npm...

Malicious code in wezen-mutation-ora-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 785a2cd14109740cafff9a8e5b31c61ce4568134f9abfba94196cfe4cfa0d4d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178362

Malicious code in io-cordelia-meteor-filament npm...

Malicious code in ethology-phoenix-unuk-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559be27cfb1ab2f6c01cd82e42610f9bb22a82253b37efdce765d9ca8e93c5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179718

Malicious code in cli-eris-cors-jest npm...

Malicious code in loglevel-event-resonance-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7eec21520de8ed6c0a4d6cca52c2046b026e45372eab13e437e1cd2d38c4f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178821

Malicious code in fusion-eigenstate-install-tethys npm...

EUVD-2025-178526

Malicious code in hexo-restart-farout-sync npm...

EUVD-2025-178437

Malicious code in impulse-holography-grunt-sequelize npm...

Malicious code in boson-module-subscription-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b125db232d506bacfed4f1c5a620f3576c9251eeb7e82fe2ab4fc0f609df2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179763

Malicious code in char-alert-abstract-decrypt-test npm...

Malicious code in meta-load-thread-grep-decompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 109caf8ad26be27a56c9b5d71584ee315b90d7198b132c76436f93ddeb1a2f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179478

Malicious code in cryptography-epimetheus-prettier-plugin-markdown-run-script npm...

Malicious code in rho-water-load-info-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14f7985d79c2471901d930216ad13686fed9538a20e6f305ed6922c2116b68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...