Malicious code in xi-moon-star-fire-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362014d5ddaa5609b560cef0f3912766ea90c9f16f84a1fd7f3d1750deb77951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179395

Malicious code in darkmatter-gravitationalwave-less-websockets npm...

EUVD-2025-180153

Malicious code in bad-alert-long-container-mu npm...

EUVD-2025-176186

Malicious code in stream-yildun-bootes-neutrino npm...

Malicious code in graphql-karma-cluster-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad37a1bc3bc4069bfd4867fc32ef836f405f93fe38cb337fd1e5e922bda5076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177214

Malicious code in phoebe-borealis-vuepress-coronalmassejection npm...

EUVD-2025-179469

Malicious code in csrf-thermochronology-oscillation-janus npm...

EUVD-2025-179774

Malicious code in changelog-borealis-resolvers-resonance npm...

EUVD-2025-175564

Malicious code in wezen-hexo-update-lithosphere npm...

EUVD-2025-180428

Malicious code in antares-apex-robotics-quito npm...

EUVD-2025-179012

Malicious code in europa-lynx-janus-repository npm...

Malicious code in kinetic-ora-bootstrap-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c94144702a359f66450437efd957137a56b3bce619a4b13ed508a050d09d69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179361

Malicious code in deimos-selenium-local-futurology npm...

EUVD-2025-179602

Malicious code in config-regulus-auth-ophiuchus npm...

EUVD-2025-175851

Malicious code in uglify-js-gatsby-mocha-titan npm...

EUVD-2025-178382

Malicious code in integer-lambda-notify-cache-try npm...

EUVD-2025-177647

Malicious code in neptunology-gravity-start-interferometry npm...

Malicious code in cloud-water-old-moon-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6319ff7b420cb0dd56f67db0f75f27c89f1cc43360a9ca664fd1a8b8668b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177844

Malicious code in middleware-css-loader-eigenstate-pavo npm...

Malicious code in mira-pipe-stratigraphy-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a737e899eebfc93719ad05ec9c57d48a39e9ff003452bde12f51658c501679d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...