EUVD-2025-179332

Malicious code in deneb-parallax-aldebaran-prettier npm...

EUVD-2025-177840

Malicious code in middleware-mini-css-extract-plugin-ignite-json npm...

EUVD-2025-176673

Malicious code in resolvers-semantic-ui-cosmochemistry-andromeda npm...

EUVD-2025-179049

Malicious code in eslint-config-apex-hermes-zooarchaeology npm...

Malicious code in pulsar-puppeteer-dagda-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c16f0f159690cf7dbabdfce738f01c9469df4d00633712fe2bd01c29f0b0514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in version-aquarius-run-script-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a84d38a922a954fbee7f9e56c1959385eeb12bfe9493e598a5dce063b254ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178033

Malicious code in loglevel-exobiology-eslint-config-rate-limiter npm...

EUVD-2025-175656

Malicious code in warp-dotenv-safe-andromeda-uglify-js npm...

EUVD-2025-176273

Malicious code in spawn-webpack-nightwatch-slides npm...

EUVD-2025-175845

Malicious code in ultra-html-webpack-plugin-zenith-quito npm...

Malicious code in superflare-on-nestjs-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bc374df6bcd185907d9484f3b7435d95ad6326a7b1eba24209d2443c9e3479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177280

Malicious code in pegasus-pulsar-plutology-astrochemistry npm...

EUVD-2025-175837

Malicious code in umbra-iota-graphql-callback npm...

Malicious code in airbnb-australis-inflation-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ecd16b89921defad1c9b79583eedf00225da0e26f2f98dc7a866f52c72ec13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177267

Malicious code in permission-resolve-function-fast-try npm...

EUVD-2025-175847

Malicious code in uglify-view-stub-simulate-short npm...

EUVD-2025-175850

Malicious code in uglify-js-gravity-upgrade-aether npm...

EUVD-2025-178539

Malicious code in hermes-config-unuk-aurora npm...

EUVD-2025-176921

Malicious code in publish-postcss-loader-achernar-hermes npm...

Malicious code in changelog-prompts-europa-blazar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146d38799b702fcf2aa71251a53635f3352bc26fc8c894932530f350b66a69b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...