Malicious code in spica-html-webpack-plugin-kronos-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82181ab2b25bcac772e3cecded34360db1572cf56e392f5f6310c0335bed342a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178358

Malicious code in io-publish-antd-outercore npm...

EUVD-2025-177440

Malicious code in ophiuchus-polaris-mineralogy-proteomics npm...

Malicious code in cosmochemistry-lacerta-magnetosphere-reveal-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08d0d5db9b30a391c486f37cb6ced3a4f296a525efa9c588f34a6a3845fe226e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeta-lambda-abstract-eta-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b820d228c75228585ef00e24bee4183f5a0dff3ec86ddc4b9cc4727395b97ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177305

Malicious code in passport-magnetosphere-sociobiology-ichnology npm...

EUVD-2025-180276

Malicious code in async-cluster-await-io npm...

Malicious code in nodemon-vega-umbriel-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b9d4a5c58194456c1863fd6896596e284d87a27db073c2d3776cf9a02526de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178731

Malicious code in geoarchaeology-archaeogenetics-spectron-webdriver-chromedriver npm...

EUVD-2025-177371

Malicious code in paleoclimatology-izar-coronalmassejection-webdriver-mocha npm...

EUVD-2025-176959

Malicious code in proxima-nightmare-postgres-seismology npm...

EUVD-2025-175880

Malicious code in tree-psi-air-moon-air npm...

EUVD-2025-178974

Malicious code in exoplanet-xerxes-interstellarmedium-octans npm...

EUVD-2025-177974

Malicious code in magnetar-eridanus-middleware-update npm...

EUVD-2025-177903

Malicious code in mensa-fornax-chariklo-geochemistry npm...

Malicious code in meteor-cosmochemistry-parsec-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f018f42ff841a03bfe473a2be5b8a5c9547a9ff5fd7162c174cc4bf249906c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in float-beta-deploy-star-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c28ea191cc624187c918a5e511152ef7fdd4e559f69dd061a432e823a1547cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180309

Malicious code in asteroid-cors-bulma-paleoclimatology npm...

EUVD-2025-179794

Malicious code in chakra-ui-fornax-umbriel-wezen npm...

Malicious code in elara-triton-quasar-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2ebd6f38ab2bc5abd8dd2a5c620057c834fe86a99da5764849ed9c0b4d1e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...