EUVD-2025-176653

Malicious code in restart-warp-webdriver-mocha-sync npm...

EUVD-2025-176519

Malicious code in sass-loader-lepton-nebula-virgo npm...

EUVD-2025-176852

Malicious code in quark-perturbation-lyra-link npm...

EUVD-2025-176647

Malicious code in reveal-md-sirius-sequelize-nebula npm...

EUVD-2025-178630

Malicious code in gulp-kinetic-mongodb-astrometry npm...

Malicious code in iota-report-phi-good-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4466f1348183e2632c1a55a4604c3526358dfe8dc19f8b17470ec8d2a5ddf2ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178615

Malicious code in halley-fusion-parcel-node-sass npm...

EUVD-2025-178237

Malicious code in jwt-firebase-izar-gulp npm...

EUVD-2025-177497

Malicious code in object-rain-fast-process-unix npm...

EUVD-2025-179532

Malicious code in cosmogenic-astroinformatics-mesosphere-soap npm...

Malicious code in cat-big-code-star-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f3f6f9d454212a45cd8e581e11bfd884a5fcbb6280ff321fad59393e2c987a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179036

Malicious code in eslint-plugin-mutation-geomorphology-cladistics npm...

EUVD-2025-180404

Malicious code in antimatter-slidev-install-void npm...

EUVD-2025-176511

Malicious code in saturnology-fusion-kinetic-astrophysics npm...

Malicious code in dotenv-parse-variables-astrobiology-readable-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465b6023a0ca0bca6df82d4e7fea4d734021c77c8d00b4a7e90ddac9a6e59305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nconf-aurora-ionosphere-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d618fe2bbc27849bdb3b7ab0735de3ede48bd7a4f02e7614ea1745ea65ea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176438

Malicious code in selenology-zenobia-loglevel-prettier-stylelint npm...

EUVD-2025-178196

Malicious code in key-static-authorize-authenticate-quick npm...

EUVD-2025-175886

Malicious code in transport-ursa-spinner-pulsar npm...

Malicious code in sagitta-frontend-eslint-config-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c2500c73f9e15b142f13f572a687f151b1f6a8e3eb54fb96cbd58ce242f02f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...