EUVD-2025-176005

Malicious code in terser-webpack-plugin-andromeda-zenobia-pavo npm...

EUVD-2025-176103

Malicious code in superposition-elara-blazar-webdriverio npm...

EUVD-2025-180096

Malicious code in betelgeuse-antd-magellan-xanthus npm...

Malicious code in eridanus-geochronology-element-ui-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c70e6b62e3a9f2699ecf4f192f3066aa1df8d5e90541a43a39c446e93e35fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176716

Malicious code in relay-xanadu-playwright-miranda npm...

EUVD-2025-178282

Malicious code in javascript-start-halley-eclipse npm...

EUVD-2025-175660

Malicious code in warn-sigma-cat-interpret-pipe npm...

EUVD-2025-179618

Malicious code in compress-water-cluster-slow-cat npm...

EUVD-2025-176329

Malicious code in small-bundle-function-minify-query npm...

EUVD-2025-180325

Malicious code in ariel-virgo-husky-pino npm...

EUVD-2025-178781

Malicious code in ganymede-flare-aurora-membrane npm...

Malicious code in tectonophysics-paleoanthropology-pegasus-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ceffeea78e713fda29ff11bd8a85a44edec98204994151a3e0232ca19dae572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180315

Malicious code in ashjustmeteai npm...

EUVD-2025-180463

Malicious code in algol-airbnb-eslint-config-elara npm...

Malicious code in winston-adonis-dotenv-parse-variables-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f796a64813b30c1c12b1198d74b70b219329a69f9abb0697a70bb9cde818dc7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179855

Malicious code in cat-air-xi-slow-visualize npm...

Malicious code in release-it-apollo-norma-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21720d221c3af640d8dc3cbd4404fd10878947a67b82f019946f024f4ca1bd45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179765

Malicious code in changelog-tachyon-writable-pipe npm...

EUVD-2025-176379

Malicious code in signal-star-benchmark-report-small npm...

Malicious code in speleology-phenomic-nova-resonance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0964688b47d97de3d008dd858b6c40cbbefa462b69aed624467438e4722a340c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...