EUVD-2025-177411

Malicious code in orchestrate-awk-encrypt-moon-fork npm...

Malicious code in hapi-prosthetics-thermochronology-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3945b57156407a7defb56a483e3d506c0a307663ac840d78caefe669db00c55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189798 Malicious code in tachyon-lacerta-relay-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8741edebad7eec01082ae61ad292f9f73ed7148cb75ac77435d0c139d964f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175882

Malicious code in tree-notify-fire-resolve-scale npm...

Malicious code in zeta-lambda-abstract-eta-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b820d228c75228585ef00e24bee4183f5a0dff3ec86ddc4b9cc4727395b97ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186439 Malicious code in cybernetics-selenology-local-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45900616fd9126bd090f5865bdf4a028806e11b2380fee63848bb099345c6c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176602

Malicious code in rollup-plugin-loglevel-archaeoastronomy-on npm...

EUVD-2025-177266

Malicious code in perseus-ablation-elara-cryptography npm...

Malicious code in blueshift-exoplanet-buffer-primatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d143c1c5b2aab61f831840778fd5711d8bdbdd3009b39af1830df9580dbe9f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180291

Malicious code in astrochemistry-rigel-csrf-cosmicweb npm...

EUVD-2025-179171

Malicious code in elektra-yakutsk-cosmicray-phoenix npm...

EUVD-2025-178779

Malicious code in ganymede-mesosphere-nconf-local npm...

EUVD-2025-178089

Malicious code in link-loopback-hydrogeology-gacrux npm...

EUVD-2025-175866

Malicious code in try-data-signal-cloud-report npm...

EUVD-2025-176014

Malicious code in terraforming-astro-virgo-toml npm...

EUVD-2025-179565

Malicious code in cors-google-mocha-prettier npm...

EUVD-2025-179480

Malicious code in cryptography-biohacking-xml-graphql npm...

EUVD-2025-178650

Malicious code in grid-mu-cloud-signal-cat npm...

EUVD-2025-178815

Malicious code in fusion-postcss-loader-supercluster-biohacking npm...

Malicious code in char-alert-abstract-decrypt-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f751a85d1082b7e437e365b50d7e9f5a5e775d31cb2f009ac1857bedf81086b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...