EUVD-2025-176091

Malicious code in sync-decoherence-xanthus-express npm...

EUVD-2025-177022

Malicious code in promise-aurora-kastra-backend npm...

EUVD-2025-177677

Malicious code in nebula-gulp-bootes-kastra npm...

EUVD-2025-175640

Malicious code in wasat-rimraf-csrf-halley npm...

EUVD-2025-180012

Malicious code in book-compile-try-fork-kernel npm...

EUVD-2025-177710

Malicious code in nashira-materialize-publish-galaxy npm...

Malicious code in cluster-tool-quasarjet-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d3dfb3f3920e3a072a4e1193a85adde9b2af5801f438ea99da4553b52e6154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-configstore-delphinus-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb641a5bd2c178e2edebd041165405025d149fbff5933904010bfd420071e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177400

Malicious code in oscillation-aquarius-ursa-parallax npm...

Malicious code in mui-meissa-subscription-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e80d941c3ae4c03da2554b9884257c7aa6be8bde051d376559e56e35e912880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177544

Malicious code in nodemon-vega-umbriel-polaris npm...

EUVD-2025-178437

Malicious code in impulse-holography-grunt-sequelize npm...

EUVD-2025-179358

Malicious code in delphinus-framework-miranda-chalk npm...

Malicious code in pulsar-puppeteer-dagda-cosmology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c16f0f159690cf7dbabdfce738f01c9469df4d00633712fe2bd01c29f0b0514 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176045

Malicious code in taurus-mutation-izar-node-sass npm...

EUVD-2025-178582

Malicious code in heka-antares-vulcan-commitizen npm...

EUVD-2025-178598

Malicious code in hash-table-enum-debug-unix npm...

Malicious code in paleoclimatology-hydra-schema-genomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790e79965034e461bb2ea78fcd7d8d2a4d35270bc4f34ab6bb58bdeca578185a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177803

Malicious code in miranda-native-alphard-browserify npm...

Malicious code in epsilon-catch-cold-beta-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07eb346f6c1bd850321de8cf4d2c038bc01bd3f69145e866d7ca9c0199128ef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...