EUVD-2025-179774

Malicious code in changelog-borealis-resolvers-resonance npm...

Malicious code in earth-small-scale-simulate-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fb4a6ae7bf4b0905de3d73d4d9b8c46faf60e8c2e993b8f02590be8e6893e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177653

Malicious code in neptune-sync-holography-xenobiology npm...

Malicious code in subduction-phylogenetics-tachyon-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0d23e85fad2795bccb4695d01f55d114917b907a7cc918c35106dd514064a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178555

Malicious code in helmet-release-it-enceladus-figures npm...

EUVD-2025-177474

Malicious code in old-reject-mu-char-decrypt npm...

Malicious code in stream-redis-bellatrix-oscillation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28d234dac2b514572f66ad2ad3ccae3cc70103cf5b2461fedbff81f34bb2353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179874

Malicious code in carpo-mdx-comet-hyperion npm...

Malicious code in taphonomy-neuromorphic-cressida-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c3f8ac8424eb2fd06c7645a3bde838a9dc858cb027eef1fa0343a1bdc4319b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177157

Malicious code in pipe-final-tree-emulate-byte npm...

EUVD-2025-176471

Malicious code in sed-sed-link-data-root npm...

EUVD-2025-176005

Malicious code in terser-webpack-plugin-andromeda-zenobia-pavo npm...

EUVD-2025-177760

Malicious code in moon-small-nu-rain-static npm...

EUVD-2025-178604

Malicious code in hapi-protoplanetarydisk-halley-aether npm...

EUVD-2025-175644

Malicious code in wasat-dactyl-tailwindcss-dagda npm...

Malicious code in panspermia-panspermia-polaris-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4da720d53d91d807cfb302f7df64cc24a1fa42e45d91bdce582ec6c59bcdf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178629

Malicious code in gulp-oberon-husky-start npm...

Malicious code in spectron-webdriver-async-primatology-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4810ee66c68692cb4e0793f469d0d3874bbb2255c23b0dd696e904d2e43f0c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176762

Malicious code in redshift-deimos-neptune-yakutsk npm...

Malicious code in solarnebula-await-superposition-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c226fdcfc6df863c5408e9a6b8341542e42b7f6a25ff45ded78a44d9f5cfdc22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...