EUVD-2025-179047

Malicious code in eslint-config-jovian-middleware-init npm...

EUVD-2025-176041

Malicious code in technocracy-buffer-outercore-tethys npm...

EUVD-2025-175792

Malicious code in upgrade-dysonswarm-node-config-got npm...

EUVD-2025-179190

Malicious code in elara-dysonswarm-sirius-pyxis npm...

EUVD-2025-177016

Malicious code in promise-impulse-levels-exec npm...

Malicious code in fork-lightyear-commitlint-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abac3d062ea3dcd3ec025e59c52c1aae54d1282809da77aa80fe4c6c4b249010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176251

Malicious code in spica-oberon-sirius-local npm...

EUVD-2025-179019

Malicious code in ethology-zephyr-dorado-browserify npm...

EUVD-2025-176350

Malicious code in sirius-stop-umbra-spawn npm...

EUVD-2025-177039

Malicious code in process-outercore-nestjs-leda npm...

Malicious code in rate-limiter-areology-dorado-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531a5a33c302063443322b56d40422675ab57fff80775b6ee7e266f4bb0b7165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177827

Malicious code in minify-report-compress-compress-process npm...

EUVD-2025-177989

Malicious code in lyra-taphonomy-fusion-exosphere npm...

EUVD-2025-178109

Malicious code in library-babel-meteor-kronos npm...

EUVD-2025-180284

Malicious code in astrometry-passport-less-filament npm...

Malicious code in ionosphere-tachyon-arcturus-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20628fd90048c494290368be2a2d5136b8700e783d74d0b8e85b978626aa1e89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aquarius-slidev-equinox-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0b4b93c5880a11a602e472cc9f2c1f1a2fb41779b5d28d02295ae6d2c12554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178447

Malicious code in import-float-omega-user-eta npm...

Malicious code in star-permission-parse-assert-small (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8fb324b2acae3a24eb32deb53820b89c37d9ead245b8e2cfde66d4842fadb29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-whitedwarf-betelgeuse-plutology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2787349d2a0b1c5c6c6c213c0c755d72dd5c786eff681299c936ceca5da3a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...