EUVD-2025-176391

Malicious code in sigma-awk-abstract-error-kappa npm...

EUVD-2025-176386

Malicious code in sigma-query-interpret-phi-process npm...

EUVD-2025-177046

Malicious code in private-sadr-proxima-private npm...

EUVD-2025-175663

Malicious code in warn-function-assert-report-thread npm...

EUVD-2025-178146

Malicious code in leda-loopback-markdown-pdf-quasar npm...

EUVD-2025-176708

Malicious code in release-it-nova-orbit-figures npm...

Malicious code in process-outercore-nestjs-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3840693770ce011f9ab6df4a9849100f172d84317ed427c44211f6467e80fbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179496

Malicious code in cross-env-singularity-europa-paleobotany npm...

EUVD-2025-176571

Malicious code in sadr-janus-apex-acamar npm...

EUVD-2025-179117

Malicious code in enum-interface-grep-reject-debug npm...

EUVD-2025-179095

Malicious code in epsilon-bash-sigma-tree-scale npm...

EUVD-2025-179218

Malicious code in earth-omega-epsilon-error-compress npm...

EUVD-2025-180302

Malicious code in astro-ignite-scripts-pulsar npm...

EUVD-2025-176355

Malicious code in sirius-react-bootstrap-ignite-pegasus npm...

EUVD-2025-178333

Malicious code in iota-zephyr-nova-octans npm...

EUVD-2025-180488

Malicious code in air-easy-dog-float-interface npm...

Malicious code in rollup-nova-wavefunction-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a71178046d6bba4cd289f92d4a80c4b5b2938521d5c4be7a784b9de70d0b722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177917

Malicious code in meissa-avior-singularity-dione npm...

EUVD-2025-177921

Malicious code in mechatronics-deneb-bunyan-radiant npm...

Malicious code in dagda-ganymede-fornax-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c482e6ef43cf12ba929a25f688df88502f4b2657364bb234a83ecb03729ec0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...