EUVD-2025-177473

Malicious code in old-string-protected-omega-decode npm...

EUVD-2025-177389

Malicious code in package-process-helios-markdown-pdf npm...

EUVD-2025-176640

Malicious code in rigel-helios-phoebe-fermion npm...

Malicious code in theta-daemon-moon-char-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2429c5994ed2876f384fed139f93e19399a8f86b62e50a60c67f7bfabdf39a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visualize-cache-web-float-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f7f24dadcead52f45d3b13c1e58579d94e0015bb0a26dfefe06ac153a45caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supercluster-grus-non-blocking-lepton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e73d9f265923611595f2bf95140778a1427bfc078db498e7da9874c1aba0f7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178505

Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection npm...

EUVD-2025-176658

Malicious code in rest-version-library-hadron npm...

EUVD-2025-178389

Malicious code in inquirer-winston-commitlint-cosmiconfig npm...

Malicious code in deimos-wezen-parsec-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4367c9173dd0932914381799df03057fc34021e6580643e35e3ac7264eeea6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-cosmochemistry-parsec-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f018f42ff841a03bfe473a2be5b8a5c9547a9ff5fd7162c174cc4bf249906c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178154

Malicious code in leda-cassini-dactyl-mongodb npm...

EUVD-2025-180501

Malicious code in adonis-prettier-stylelint-ignite-magellan npm...

EUVD-2025-179873

Malicious code in carpo-release-it-oberon-halley npm...

EUVD-2025-179250

Malicious code in double-file-encode-moon-virtualize npm...

EUVD-2025-176928

Malicious code in publish-ichnology-eslint-config-luna npm...

EUVD-2025-177545

Malicious code in nodemon-terser-webpack-plugin-private-mantle npm...

EUVD-2025-180081

Malicious code in big-data-shell-omega-reject npm...

EUVD-2025-179277

Malicious code in dorado-development-troposphere-futurology npm...

Malicious code in lepton-husky-phenomic-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8e5f8a7b80fc50583741a5d4fe7563cb8ec3706c4e734dffb7de609c501073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...