EUVD-2025-178875

Malicious code in fomalhaut-restart-loglevel-forever npm...

EUVD-2025-178121

Malicious code in less-pavo-restart-start npm...

EUVD-2025-176119

Malicious code in superflare-paleoclimatology-pavo-lacerta npm...

Malicious code in mutation-exec-arcturus-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 482caf12c32414f2e9b669998df2ea4c0f636c61aa2294ed275285eea1b96a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-mini-css-extract-plugin-bellatrix-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0f4cb1363923700e234a126ba9afc3eb8cefa5fbc782a1ed68bce1e6c9fdf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176522

Malicious code in sass-loader-cluster-link-jekyll npm...

EUVD-2025-179277

Malicious code in dorado-development-troposphere-futurology npm...

Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc399df1baa583fe9c5b3c3d19473cebd1498ab6c0de46cdc1ef484368df6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178734

Malicious code in genomics-paleoclimatology-aldebaran-gacrux npm...

EUVD-2025-178211

Malicious code in kastra-oberon-spectroscopy-mocha npm...

EUVD-2025-177011

Malicious code in promise-umbra-css-loader-postcss-loader npm...

EUVD-2025-176351

Malicious code in sirius-spectron-webdriver-mutation-glaciology npm...

EUVD-2025-176654

Malicious code in restart-virtualreality-cli-spectron npm...

EUVD-2025-176597

Malicious code in root-cluster-bad-final-rho npm...

EUVD-2025-180288

Malicious code in astroinformatics-brane-firebase-socketio npm...

EUVD-2025-179028

Malicious code in eta-proxy-omicron-theta-sanitize npm...

EUVD-2025-176596

Malicious code in root-fire-user-hash-static npm...

EUVD-2025-177375

Malicious code in paleoclimatology-draco-backend-triton npm...

EUVD-2025-176463

Malicious code in sedna-jest-init-delphinus npm...

Malicious code in ursa-auth0-delphinus-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3d75c84533df7d7cbc4e6990cd81f583a0ee3f1095671e9cad2c2b7ff44e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...