EUVD-2025-178161

Malicious code in lacerta-polaris-tool-resolvers npm...

EUVD-2025-180487

Malicious code in air-epsilon-zeta-key-bundle npm...

EUVD-2025-179290

Malicious code in docusaurus-callback-abiogenesis-mesosphere npm...

EUVD-2025-177989

Malicious code in lyra-taphonomy-fusion-exosphere npm...

Malicious code in oortcloud-css-minimizer-webpack-plugin-config-cryovolcano (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f7585eeec78d135fc3f19ee9979e64089eeaea12fcd8b0be0c70ead619b829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175990

Malicious code in test-on-spinner-docusaurus npm...

EUVD-2025-178979

Malicious code in exoplanet-genomics-thermosphere-phoebe npm...

EUVD-2025-177567

Malicious code in node-sass-commitlint-lynx-public npm...

EUVD-2025-178791

Malicious code in gamma-good-socket-enum-route npm...

EUVD-2025-178899

Malicious code in finally-function-boolean-refactor-runtime npm...

Malicious code in omicron-short-water-easy-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1dcdfe4a6ddfceada517aa147ac3a3ae9554745ebbefbe636b7fd0618a482e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179724

Malicious code in class-debug-private-decrypt-slow npm...

EUVD-2025-176415

Malicious code in server-carpo-carpo-cosmicray npm...

EUVD-2025-175674

Malicious code in vuetify-xanadu-stratigraphy-sedimentology npm...

EUVD-2025-177755

Malicious code in morgan-react-bootstrap-cz-conventional-changelog-helios npm...

EUVD-2025-180248

Malicious code in atlas-repository-nova-eclipse npm...

EUVD-2025-176277

Malicious code in spawn-regulus-brane-nodemon npm...

EUVD-2025-178693

Malicious code in good-bundle-scale-grid-load npm...

Malicious code in process-outercore-nestjs-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3840693770ce011f9ab6df4a9849100f172d84317ed427c44211f6467e80fbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-publish-hexo-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00717e5974b423da54268e70eeedbebfd4bb4bf7ee91f3dd7e0b29ca6d88211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...