EUVD-2025-179870

Malicious code in cassini-hawkingradiation-rocket-sedna npm...

EUVD-2025-178798

Malicious code in gacrux-magellan-cluster-version npm...

EUVD-2025-179790

Malicious code in chakra-ui-standard-nuxtjs-sass-loader npm...

EUVD-2025-176034

Malicious code in technosignature-wezen-blitz-blazar npm...

Malicious code in aether-vuepress-gatsby-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41993d444e8edf7b999acdd8ece110ec2910e10679e4e34882c0006f8eb8defb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiverse-perseus-ignite-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e2dc25fda56b320b22f7aaa8af3bf5680fb5d97128cb6cfe22f2435a8dfc067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fermiparadox-redshift-rollup-plugin-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbf33468d1a669d9d3768f32cc08b7d8834db618abdd21c594206c8359a7542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176769

Malicious code in redis-astrophysics-astrophysics-webpack npm...

Malicious code in changelog-graviton-hadron-panspermia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4654a7b3fbdc91ef9d6bb9b21a92ed4ef7c06883f0343185ff0493e3af578e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-parsec-native-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad95dcc42d1e37b32db227d88bcbb1c29f48527e882181591d17621d99b3b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179224

Malicious code in dysonswarm-apex-graphql-module npm...

Malicious code in astrochemistry-planckscale-levels-singularitarianism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09eaada391f12d930144df90244194a3d73586bebf0dca02fb04568762e1e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177374

Malicious code in paleoclimatology-eventhoriz-areology-higgs npm...

EUVD-2025-176836

Malicious code in query-betelgeuse-nebula-dotenv-safe npm...

EUVD-2025-178099

Malicious code in library-update-commitizen-jabbah npm...

EUVD-2025-177241

Malicious code in perturbation-css-loader-loopback-uninstall npm...

EUVD-2025-179259

Malicious code in dotenv-safe-norma-vuetify-paleomagnetism npm...

EUVD-2025-177061

Malicious code in primatology-algol-postgres-unuk npm...

EUVD-2025-180090

Malicious code in betelgeuse-frontend-titan-yildun npm...

Malicious code in easy-kernel-deserialize-public-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c7f9693c4ee4fd27e0d30c8a5e7c70561a199ab73f1468b17ef1596d9c03dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...