EUVD-2025-178053

Malicious code in load-float-omega-char-mock npm...

EUVD-2025-177732

Malicious code in mutation-augmentedreality-archaeoastronomy-neutronstar npm...

EUVD-2025-179862

Malicious code in castor-callisto-miranda-quasar npm...

EUVD-2025-177751

Malicious code in mu-dog-proxy-decode-unix npm...

EUVD-2025-176613

Malicious code in rocket-package-sass-loader-avior npm...

MAL-2025-187802 Malicious code in lint-antares-luna-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0795e430f9e9aba719b3b6a20ccc0a64f2fccd57f1f4a9b17108037f6fd87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176749

Malicious code in registry-firebase-bunyan-prettier npm...

EUVD-2025-175716

Malicious code in virgo-joviology-proxima-install npm...

MAL-2025-190379 Malicious code in xenos-lepton-cosmogenic-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd42edaad102d51c7897f5f9f97d176aabb390e1ccf4beee36af7105a32ec56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176519

Malicious code in sass-loader-lepton-nebula-virgo npm...

EUVD-2025-178002

Malicious code in luna-sequelize-markdown-pdf-meissa npm...

EUVD-2025-175640

Malicious code in wasat-rimraf-csrf-halley npm...

EUVD-2025-178586

Malicious code in hawkingradiation-ora-celeste-toml npm...

EUVD-2025-179938

Malicious code in bunyan-carina-adonis-mysql npm...

EUVD-2025-178592

Malicious code in hawkingradiation-carina-oortcloud-gammarayburst npm...

EUVD-2025-178588

Malicious code in hawkingradiation-jupiter-toml-comet npm...

EUVD-2025-176292

Malicious code in solarnebula-betelgeuse-mui-apollo npm...

EUVD-2025-180016

Malicious code in blueshift-publish-carina-nconf npm...

EUVD-2025-175482

Malicious code in xml-eris-lyra-tectonophysics npm...

Malicious code in native-electron-builder-nashira-tachyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c326aa33890289362406cb0f22eec8401d0b31d237121e8667b24eaa89de69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...