EUVD-2025-180340

Malicious code in arcturus-phenomic-glaciology-promise npm...

EUVD-2025-175884

Malicious code in tree-awk-notify-beta-cloud npm...

EUVD-2025-177689

Malicious code in nconf-superagent-public-writable npm...

EUVD-2025-177954

Malicious code in markdown-nconf-string-xerxes npm...

EUVD-2025-179243

Malicious code in draco-gacrux-carpo-await npm...

Malicious code in filament-axios-node-config-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b4ca708c825886f59edaa9b7603233077a52e4be38ca0410b533b306826913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fomalhaut-ora-cybernetics-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9964b1a5f5727aa60a83b521fded36b2099112209577c7f81b7be40560c99fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176923

Malicious code in publish-nova-helios-restart npm...

EUVD-2025-177609

Malicious code in nightmare-europa-restart-antares npm...

EUVD-2025-178526

Malicious code in hexo-restart-farout-sync npm...

EUVD-2025-177988

Malicious code in lyra-warp-dactyl-interferometry npm...

EUVD-2025-177475

Malicious code in old-import-decode-table-process npm...

EUVD-2025-177706

Malicious code in native-coronalmassejection-writable-bionics npm...

Malicious code in arcturus-bellatrix-standard-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7609f325b00b45170897f239a83a8f9f0a9ba0025c5dc5641331b70050b2b2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-capella-auth0-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73e61530abddf10af54e4b3e7e468fb6e763ffe1f4059aec6a0de811685b393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177296

Malicious code in pavo-auth-sedna-polaris npm...

Malicious code in wind-psi-zeta-debug-zeta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccb1fbb789018c346a5f6f4730f72aeec7f3a6b735977e2c9cd571c4d32b0a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180060

Malicious code in bioinformatics-proxima-uglify-js-rimraf npm...

EUVD-2025-175846

Malicious code in uglify-zeta-tree-delta-runtime npm...

Malicious code in got-paleoclimatology-nebula-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c594bf125d3e98c114785d243fe86ffa7d25834160d19bd9debc56f1fabc9f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...