Malicious code in odin-baryon-primatology-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2818dc552c9cfc1b8556ecb96bea85e101159cbac44081b894801c548d0ed4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-child-process-playwright-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2930943f9773ed3a8e0e8da3151f56613a8f80e333398f6cd40f7d89ac3f9b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mesosphere-kinetic-ignite-tectonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b5b6d11a7de70ebf25c858d96c58eb3b08a382c9a7864827f96f9a791eed7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177681

Malicious code in nebula-deneb-winston-apex npm...

EUVD-2025-180371

Malicious code in aquarius-slidev-equinox-procyon npm...

EUVD-2025-179829

Malicious code in centauri-module-adonis-reveal-md npm...

EUVD-2025-176534

Malicious code in sandbox-long-compress-book-log npm...

EUVD-2025-175464

Malicious code in xo-quasarjet-publish-npm npm...

Malicious code in cosmochemistry-lacerta-magnetosphere-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d0d5db9b30a391c486f37cb6ced3a4f296a525efa9c588f34a6a3845fe226e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176821

Malicious code in radiant-event-bootstrap-geodynamo npm...

EUVD-2025-179179

Malicious code in electron-pm2-toml-test npm...

Malicious code in umbriel-zenobia-sedna-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b10880c1028577aca2324bcb02cb17d6dcafcf9da7aade9173f0cd6991bed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177079

Malicious code in prettier-json-publish-quito npm...

EUVD-2025-178843

Malicious code in foundation-await-pavo-chariklo npm...

EUVD-2025-177063

Malicious code in prettier-stylelint-soap-acamar-build npm...

EUVD-2025-178142

Malicious code in lepton-async-archaeogenetics-exoplanet npm...

Malicious code in parse-array-slow-emulate-notify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79730effee3d6d0c7142b05c594c736477c5c548260feef0b81f2fa621df42c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180186

Malicious code in await-lacerta-ganymede-commitizen npm...

EUVD-2025-177705

Malicious code in native-docusaurus-xerxes-unuk npm...

Malicious code in taurus-interferometry-global-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423d2fb9cd944e08525cd67c996f1e7bc14d018867030474945cf79ccd4d9b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...