Malicious code in paleomagnetism-playwright-blackhole-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3ac923ef3e0b0386e7575fe8798cedb5b699921978d28e61fc8bdbe8f8eaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typeorm-xanthus-solis-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb5168a960f3e3d393108ebcfe184344358d5a5de8bd0ebd27903e2f4fc0ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178810

Malicious code in futurology-arcturus-saturnology-leda npm...

EUVD-2025-179293

Malicious code in dione-troposphere-oscillation-andromeda npm...

EUVD-2025-176814

Malicious code in radioastronomy-augmentedreality-library-style-loader npm...

EUVD-2025-176270

Malicious code in spectron-config-cluster-command npm...

EUVD-2025-177673

Malicious code in nebula-polaris-prettier-wormhole npm...

Malicious code in umbriel-spica-rate-limiter-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24a2c3e8a9bab387f482012d72bbd73ca8104bd9ac31e0303a0cd6bd10374ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176725

Malicious code in reject-report-water-thread-parse npm...

EUVD-2025-176688

Malicious code in repository-repository-nconf-barnard npm...

EUVD-2025-178655

Malicious code in grep-dog-function-stub-tree npm...

EUVD-2025-178874

Malicious code in fomalhaut-venus-pavo-update npm...

EUVD-2025-177793

Malicious code in mocha-neptunology-flare-galaxy npm...

Malicious code in plutology-meteor-xerxes-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb5bc61e9eac228156b339e33b38872ab4c63538b4ef99c2269a8dd85462dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-computing-less-loader-mensa-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefb4c011996c06f58eda7e1840993e823cf3eddca4bdc92a366643fbc9da57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180110

Malicious code in bellatrix-prompts-webpack-paleobotany npm...

EUVD-2025-180175

Malicious code in awk-node-abstract-interpret-alert npm...

Malicious code in run-script-koa-json-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddacb19a7b3e97bf03064774e12705d50f27af3a4fa50bfc8148937c7bbe0782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175595

Malicious code in webdriverio-npm-supervisor-blaze npm...

Malicious code in ursa-comet-cosmogenic-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd11b0b7a1927f924e9836d71f861f050ea05f975ce2f6fb00a09cfe62d5135f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...