EUVD-2025-178150

Malicious code in leda-gemini-saturnology-jovian npm...

EUVD-2025-175890

Malicious code in transport-postcss-loader-terser-betelgeuse npm...

EUVD-2025-176513

Malicious code in saturnology-equinox-cordelia-wavefunction npm...

EUVD-2025-175934

Malicious code in titan-luna-luna-prompts npm...

EUVD-2025-175874

Malicious code in triton-radiant-epimetheus-await npm...

EUVD-2025-178397

Malicious code in innercore-superposition-lint-staged-adonis npm...

Malicious code in celeste-archaeoastronomy-despina-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c86b174fa7f441665264408c849b5a246c6da4cd40a9e62d57bbf70b68a32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175785

Malicious code in upsilon-decode-catch-log-function npm...

EUVD-2025-176043

Malicious code in taurus-webdriverio-helios-gemini npm...

Malicious code in virgo-build-equinox-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9961e2c6deaa43a8d67fbb4833931e4dc8d80f69499fa9dc63c9ee7d592e7c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176102

Malicious code in superposition-enif-genomics-australis npm...

EUVD-2025-177929

Malicious code in mdx-hyperion-taurus-antimatter npm...

EUVD-2025-180464

Malicious code in aldebaran-thuban-gacrux-apex npm...

EUVD-2025-178988

Malicious code in exec-zephyr-xo-izar npm...

EUVD-2025-175497

Malicious code in xenos-lepton-cosmogenic-telesto npm...

EUVD-2025-179598

Malicious code in configstore-hermes-development-update npm...

EUVD-2025-175940

Malicious code in titan-bootstrap-lynx-comet npm...

Malicious code in mensa-subscription-antares-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d55c01e441ccf96182c4b8b99c8df823b928bf5f93c08e93de762a8921a7643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stratosphere-speleology-rollup-plugin-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0070903b281cd33d856ab30b6eb2f06f5f37806f5672eae32b0dbe0e003d1158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in darkenergy-palynology-publish-terraforming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c5069eda2268716a6bd3f21b04e0176efd902552c133cb959b836a92adc3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...