Malicious code in commitizen-antares-magellan-saturnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1c1df5aa59f1547dc7c7f609cbd53203e8a2d44e63c739099244c9ac7aa5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180148

Malicious code in bad-info-encrypt-boolean-simple npm...

EUVD-2025-179965

Malicious code in browserify-sedna-apollo-airbnb npm...

EUVD-2025-175749

Malicious code in user-refactor-cluster-transpile-eta npm...

Malicious code in ablation-semantic-ui-readable-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb999c04b781769ca44990d467de461dd690a88b83be66c974ada6a559b8a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-zephyr-nova-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 474c33dcd82c42f216800019ef265100456f84354df000be4506aad7555b1467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178295

Malicious code in jasmine-ichnology-astro-proteomics npm...

EUVD-2025-176999

Malicious code in prompts-xanthus-blitz-eslint npm...

EUVD-2025-178478

Malicious code in hydra-regulus-wavefunction-spectron npm...

EUVD-2025-179758

Malicious code in char-xml-xml-validate-validate npm...

EUVD-2025-178746

Malicious code in gemini-fornax-commitlint-rest npm...

EUVD-2025-179706

Malicious code in cloud-water-old-moon-wind npm...

EUVD-2025-179013

Malicious code in europa-loglevel-levels-async npm...

EUVD-2025-176354

Malicious code in sirius-registry-webpack-quasar npm...

Malicious code in dagda-technocracy-commitlint-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5d983e33879369dd931cad741e8149906dfd91e5b8a8b102b534b4b2cea15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179894

Malicious code in callisto-europa-relay-bootes npm...

Malicious code in phoebe-taurus-xerxes-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ce33902acb11575c7df090bd0de3e13592b69b1c04fc0393bb8dc491e30e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daemon-function-throw-file-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a73e261a4f17a185bcca6a3ab3abc503be436cc2631043966eea2b64c29a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179613

Malicious code in concurrently-janus-equinox-spinner npm...

Malicious code in convict-ultra-paleoceanography-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2845167a2257ec7f82721ef915aacbaf01c5ba75ccb341823c0098c0746549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...