EUVD-2025-179811

Malicious code in ceres-morgan-stream-singularitarianism npm...

Malicious code in umbriel-zenobia-sedna-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b10880c1028577aca2324bcb02cb17d6dcafcf9da7aade9173f0cd6991bed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177079

Malicious code in prettier-json-publish-quito npm...

EUVD-2025-177398

Malicious code in oscillation-leda-warp-framework npm...

EUVD-2025-178843

Malicious code in foundation-await-pavo-chariklo npm...

EUVD-2025-177063

Malicious code in prettier-stylelint-soap-acamar-build npm...

EUVD-2025-178142

Malicious code in lepton-async-archaeogenetics-exoplanet npm...

Malicious code in parse-array-slow-emulate-notify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79730effee3d6d0c7142b05c594c736477c5c548260feef0b81f2fa621df42c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180186

Malicious code in await-lacerta-ganymede-commitizen npm...

EUVD-2025-177705

Malicious code in native-docusaurus-xerxes-unuk npm...

Malicious code in taurus-interferometry-global-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423d2fb9cd944e08525cd67c996f1e7bc14d018867030474945cf79ccd4d9b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178650

Malicious code in grid-mu-cloud-signal-cat npm...

EUVD-2025-178317

Malicious code in janus-aldebaran-middleware-paleontology npm...

Malicious code in europa-fork-andromeda-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f06c976d398e6600330ef91542a8aa6d3f7aa644912faa1db980b04078a6339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175514

Malicious code in xenobiology-darkmatter-fermion-io npm...

EUVD-2025-177371

Malicious code in paleoclimatology-izar-coronalmassejection-webdriver-mocha npm...

Malicious code in terser-webpack-plugin-mechatronics-rest-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d591555d92c42e4a868143c59d833b18854369f7c4865e3cce2a3fcf9bdfc6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178802

Malicious code in gacrux-betelgeuse-package-webdriver-manager npm...

Malicious code in jovian-postgres-webdriver-mocha-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecf3fd1d508e4debb89f36a79eb6c7ac29572b4b9404eb582a72f90583c8daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webpack-query-thermochronology-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a6ba0afcd681d793424b23a2849d2d1319c11a0069ba3956b955fc994186da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...