EUVD-2025-177791

Malicious code in mock-easy-tree-long-cloud npm...

EUVD-2025-176679

Malicious code in resolvers-forever-mongoose-multiverse npm...

EUVD-2025-179497

Malicious code in cross-env-package-rimraf-antares npm...

EUVD-2025-176410

Malicious code in server-publish-ultra-ultra npm...

EUVD-2025-176313

Malicious code in sociobiology-castor-package-prompts npm...

EUVD-2025-178872

Malicious code in forever-cypress-public-package npm...

EUVD-2025-179853

Malicious code in cat-compile-analyze-deploy-cloud npm...

EUVD-2025-179646

Malicious code in command-react-bootstrap-neuromorphic-magellan npm...

Malicious code in code-report-cold-iota-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64bf5e8505918bd9d308b0badcac899a832317e13a323ffe00e5666a0329a5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176030

Malicious code in tectonic-seismology-upgrade-commitizen npm...

Malicious code in dagda-pulsar-redshift-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01eb7e5dee33aa92aeb7c166125c8a2a537b2b75814637049b7ce936ca515d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stub-emulate-decompress-view-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3014404892613825d603f59e7f5acebc98b397d1e96068233852a6fa05f78311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178475

Malicious code in hydrogeology-mesosphere-event-troposphere npm...

Malicious code in good-serialize-protected-tau-fast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96e8ca90f6efdce57d44d772017ed7d940eb888854d1044f6330ce7ec439930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-interferometry-mesosphere-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd849704bf71e9d336811ba1de97471e6c1bcb7ebb97e7674bce3214b8b4898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178683

Malicious code in got-install-blackhole-pipe npm...

EUVD-2025-178993

Malicious code in exec-mira-puppeteer-warp npm...

EUVD-2025-176381

Malicious code in signal-authenticate-cluster-await-byte npm...

EUVD-2025-176277

Malicious code in spawn-regulus-brane-nodemon npm...

Malicious code in umbra-jekyll-foundation-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c106822cf8e3fa26d502751c57e0f20c137335a06eaa078c6724cb7fa72d9938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...