EUVD-2025-180501

Malicious code in adonis-prettier-stylelint-ignite-magellan npm...

EUVD-2025-178964

Malicious code in exosphere-scripts-halley-upgrade npm...

EUVD-2025-180430

Malicious code in antares-aether-run-script-pino-pretty npm...

EUVD-2025-179798

Malicious code in chai-schema-plutology-eclipse npm...

EUVD-2025-179184

Malicious code in electron-builder-csv-npm-asteroid npm...

EUVD-2025-178544

Malicious code in hercules-pyxis-rehype-hermes npm...

EUVD-2025-175710

Malicious code in virtualreality-algol-loglevel-nebula npm...

EUVD-2025-178652

Malicious code in grep-pi-final-interpret-cloud npm...

Malicious code in corvus-phylogenetics-metabolomics-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1896e9775f1ddc9909fdfe077e42090773fe04d0f252673361b2626480d650c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-enif-cryonics-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1cb08800e2395ac2ce2014130ec27002e68fd1d04853aac2157234a70f9542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176582

Malicious code in run-script-taphonomy-interstellarmedium-antimatter npm...

EUVD-2025-176490

Malicious code in scripts-duplex-innercore-mongoose npm...

EUVD-2025-178650

Malicious code in grid-mu-cloud-signal-cat npm...

EUVD-2025-178272

Malicious code in jovian-development-meissa-configstore npm...

EUVD-2025-176232

Malicious code in standard-apollo-tardigrade-perseus npm...

EUVD-2025-177279

Malicious code in pegasus-quasar-oscillation-titan npm...

EUVD-2025-177829

Malicious code in minify-mu-catch-authenticate-user npm...

Malicious code in browserify-sedna-apollo-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9274311e3df04e5c51c1bd2fd4419846f61128c31217b919fde8910c9c1e8e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flare-backend-jsonp-orogeny (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06640d76332704792e5098c70eb8c3d1552602cf276e52392177510a7cc3a1b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exec-antimatter-jovian-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081e854fbceefba63e765f5c1e12b63030ea5aa297f5d9ba7bbe5e1ce7be5c96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...