EUVD-2025-175585

Malicious code in webpack-quantum-babel-dione npm...

EUVD-2025-178016

Malicious code in loop-quito-hyperion-centauri npm...

EUVD-2025-177357

Malicious code in paleomagnetism-izar-gacrux-kaus npm...

EUVD-2025-176211

Malicious code in static-view-warn-cluster-catch npm...

EUVD-2025-176787

Malicious code in rate-limiter-tethys-fermiparadox-cosmos npm...

EUVD-2025-178665

Malicious code in gravity-start-triton-oauth npm...

EUVD-2025-178830

Malicious code in frontend-kuiperbelt-proteomics-miranda npm...

EUVD-2025-180467

Malicious code in aldebaran-regulus-bellatrix-prompts npm...

EUVD-2025-179160

Malicious code in emulate-link-shell-async-double npm...

EUVD-2025-179281

Malicious code in dog-book-protected-scale-grid npm...

Malicious code in materialize-dotenv-safe-sublimation-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefa120636cfd6f73b190f56220380ce77849e4a839a8559d1106992e1aa7d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178634

Malicious code in grus-schema-odin-library npm...

EUVD-2025-178368

Malicious code in interstellarmedium-coronalmassejection-hadron-quasar npm...

EUVD-2025-178053

Malicious code in load-float-omega-char-mock npm...

EUVD-2025-177326

Malicious code in parcel-farout-webdriver-manager-sails npm...

EUVD-2025-176483

Malicious code in scripts-thermochronology-corvus-stop npm...

EUVD-2025-178055

Malicious code in load-abstract-final-static-pipe npm...

EUVD-2025-179050

Malicious code in eslint-config-antares-deneb-scorpius npm...

Malicious code in zooarchaeology-install-aether-extremophile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c22366e1d5300faf7e5c1fe07291be7060715baefed7aae9da5cc0a995bc55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xml-eris-lyra-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f15351ff000357cf55920a6174c8fb220b1b8986f075040a4534a6af1db182d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...