Malicious code in umbra-jekyll-foundation-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c106822cf8e3fa26d502751c57e0f20c137335a06eaa078c6724cb7fa72d9938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-higgs-jasmine-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94744e4363382314160fd2c7e5b498755be2a10ae9e8fa7b684813a28d90a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176616

Malicious code in rocket-got-heka-json npm...

EUVD-2025-180159

Malicious code in babel-ophiuchus-mira-bellatrix npm...

EUVD-2025-176107

Malicious code in supernova-phylogenetics-terser-abiogenesis npm...

Malicious code in permission-index-zero-visualize-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef95024f895fbc9dd8bd4d4a7180084f57208d75170afa7adc3e52403b32a029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180266

Malicious code in async-iota-pavo-quasar npm...

EUVD-2025-179372

Malicious code in decrypt-sun-mock-rain-debug npm...

EUVD-2025-178285

Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation npm...

EUVD-2025-177278

Malicious code in pegasus-radiant-sedna-juno npm...

EUVD-2025-177498

Malicious code in object-chi-yaml-authorize-zero npm...

EUVD-2025-180057

Malicious code in biomimicry-epimetheus-thermochronology-native npm...

EUVD-2025-177460

Malicious code in omicron-short-water-easy-beta npm...

EUVD-2025-180012

Malicious code in book-compile-try-fork-kernel npm...

EUVD-2025-176822

Malicious code in radiant-cross-env-neutrino-local npm...

EUVD-2025-176432

Malicious code in sequelize-eris-europa-sails npm...

Malicious code in karma-cross-env-mocha-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc707037d54ddbddf16b2cf0245a7546cb636b2bd26cc4ef826e23f5433923df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178387

Malicious code in install-enceladus-mesosphere-superflare npm...

EUVD-2025-178188

Malicious code in kinetic-paleoclimatology-holography-tailwindcss npm...

Malicious code in bad-stub-key-fast-minify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c2c8f6d14460407b52dec97db373eef1b32d2587cad3e6194362609b822c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...