EUVD-2025-180196

Malicious code in avior-gulp-sagitta-ganymede npm...

EUVD-2025-179952

Malicious code in build-neptunology-neptunology-adonis npm...

Malicious code in dendrochronology-graphql-betelgeuse-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12230401a2890b637b05550d901e8bcf53d8e9b4dd1151598bc395c866b8e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleoclimatology-draco-backend-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdaa0bdc30656057f5e04b2da3574851ff0ee47c443373d7c23e7650c44b40a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paleoceanography-shelljs-umbriel-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2386202e5955957868e619896d6eb531b3f4a1f167c4964e7c4ce5d273871974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177930

Malicious code in mdx-development-elara-stratosphere npm...

EUVD-2025-178907

Malicious code in file-decompress-gamma-wind-object npm...

EUVD-2025-176452

Malicious code in seismology-enceladus-comet-singularity npm...

EUVD-2025-177502

Malicious code in oberon-geochronology-yakutsk-neuromorphic npm...

Malicious code in soap-slidev-carpo-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae0139684ff37091484c18ca8bc5d4cf9f1515aa5a2f6022fb21a338af537e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178541

Malicious code in hermes-browserify-alphard-greatfilter npm...

EUVD-2025-178013

Malicious code in loopback-magellan-foundation-csrf npm...

EUVD-2025-176379

Malicious code in signal-star-benchmark-report-small npm...

EUVD-2025-177687

Malicious code in nconf-zenobia-antimatter-changelog npm...

EUVD-2025-179395

Malicious code in darkmatter-gravitationalwave-less-websockets npm...

EUVD-2025-180235

Malicious code in aurora-exec-nebula-titan npm...

EUVD-2025-176487

Malicious code in scripts-jabbah-apollo-phenomic npm...

EUVD-2025-179835

Malicious code in centauri-lacerta-config-taurus npm...

EUVD-2025-175705

Malicious code in visualize-cache-web-float-slow npm...

Malicious code in redis-acamar-terser-webpack-plugin-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6796676555503346950febf9220667349738f8b77d07e9b3bee2eed252988ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...