EUVD-2025-175842

Malicious code in ultra-mira-centaurus-io npm...

EUVD-2025-177567

Malicious code in node-sass-commitlint-lynx-public npm...

Malicious code in loglevel-event-resonance-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7eec21520de8ed6c0a4d6cca52c2046b026e45372eab13e437e1cd2d38c4f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176262

Malicious code in spectron-ursa-yonder-command npm...

EUVD-2025-179290

Malicious code in docusaurus-callback-abiogenesis-mesosphere npm...

EUVD-2025-177966

Malicious code in magnetosphere-quito-isostasy-despina npm...

EUVD-2025-176848

Malicious code in quasar-auth-spectron-thuban npm...

EUVD-2025-179255

Malicious code in dotenv-safe-vortex-meissa-webdriverio npm...

Malicious code in entanglement-levels-leda-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e292447f2134db338338d63f8b2a16b4bc83686c388f6b6c05cd2d77c971844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promise-hawkingradiation-paleoclimatology-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9699ad994533c1d515aa9b41aec6b38a1e46a1c81707dacd5c84fe82663b1f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180460

Malicious code in algol-apollo-indus-extremophile npm...

Malicious code in nodemon-meissa-outercore-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2e23c45539583f659e07b8c25c6f64355c7809af168ed58fe5b4b1e9e94297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-express-sync-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc11ed6a8c3867ed71199224db53e25c2338a7f38da642038050bbef32d06101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179617

Malicious code in concurrently-configstore-lyra-perseus npm...

EUVD-2025-175946

Malicious code in throw-simple-old-export-info npm...

EUVD-2025-180113

Malicious code in bellatrix-mira-europa-commitlint npm...

EUVD-2025-177496

Malicious code in octans-buffer-commitlint-config-angular-puppeteer npm...

EUVD-2025-179271

Malicious code in dorado-spectron-webdriver-spectron-cache npm...

Malicious code in remark-ceres-version-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fb52c758ce5e9d99a04067da85ab9b30625f2bc45fc74782d8190a83db49eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbriel-spica-rate-limiter-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24a2c3e8a9bab387f482012d72bbd73ca8104bd9ac31e0303a0cd6bd10374ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...