Malicious code in europa-fork-andromeda-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f06c976d398e6600330ef91542a8aa6d3f7aa644912faa1db980b04078a6339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175514

Malicious code in xenobiology-darkmatter-fermion-io npm...

EUVD-2025-177371

Malicious code in paleoclimatology-izar-coronalmassejection-webdriver-mocha npm...

Malicious code in terser-webpack-plugin-mechatronics-rest-neptunology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d591555d92c42e4a868143c59d833b18854369f7c4865e3cce2a3fcf9bdfc6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178802

Malicious code in gacrux-betelgeuse-package-webdriver-manager npm...

Malicious code in jovian-postgres-webdriver-mocha-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecf3fd1d508e4debb89f36a79eb6c7ac29572b4b9404eb582a72f90583c8daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180310

Malicious code in assert-zeta-visualize-data-char npm...

EUVD-2025-177955

Malicious code in markdown-multiverse-vuepress-geoarchaeology npm...

EUVD-2025-180350

Malicious code in archaeometry-rollup-plugin-astro-install npm...

Malicious code in mechatronics-arcturus-puppeteer-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1eaa9f69cc53c02498bf1eed85f24aed05f14f42b3aebd1070fcefaea74066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178058

Malicious code in lithosphere-markdown-pdf-winston-neptune npm...

Malicious code in integer-web-key-resolve-mu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94aad90f40c30ad2202a9b22aa2607757388041740bb1902fc51611a74dbef91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177778

Malicious code in module-user-signal-pi-monitor npm...

EUVD-2025-180288

Malicious code in astroinformatics-brane-firebase-socketio npm...

EUVD-2025-179950

Malicious code in bulma-equinox-build-nova npm...

EUVD-2025-180183

Malicious code in await-rate-limiter-ophiuchus-chai npm...

EUVD-2025-175412

Malicious code in zephyr-hyperion-cypress-pulsar npm...

EUVD-2025-175780

Malicious code in upsilon-sandbox-static-module-validate npm...

MAL-2025-185873 Malicious code in book-good-old-sun-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2cd52bc87cf6a49f1316acfb38ffa8d78d4dc56904ce569006a96a9d6b4270e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187518 Malicious code in interstellarmedium-remark-procyon-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b67edcb7e03c7978ec0ee60312c057ae5dc8fdfc867993b5b2d333ba060e48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...