EUVD-2025-175916

Malicious code in tool-wavefunction-ultra-gridsome npm...

Malicious code in pm2-dorado-lithosphere-gravitationalwave (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0bf0122bf53ffd695ca74ef50913f10924601962d70f7e2efee47d07ce23d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175626

Malicious code in wavefunction-perturbation-stratosphere-supercluster npm...

Malicious code in dotenv-safe-parsec-soap-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e893f8ea331585741d2e799fca6e6967bc3995df4fbfe523ae985a21231bd8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179737

Malicious code in child-process-loglevel-elektra-eleventy npm...

Malicious code in zooarchaeology-nodemon-semantic-release-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc86611ecc1d408557ed31ce6290315bef498929933479df9f8045b837679a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179667

Malicious code in comet-exoplanet-oortcloud-cosmicsilence npm...

EUVD-2025-175881

Malicious code in tree-notify-report-decrypt-scale npm...

Malicious code in alphard-comet-transport-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c8d92d35be1e1dfe8247bfe1991bc31f583cadc4ac985cb06952c40c4ae695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177911

Malicious code in meissa-markdown-iota-vortex npm...

EUVD-2025-179796

Malicious code in chakra-ui-ethology-biomimicry-superflare npm...

Malicious code in stream-andromeda-proxima-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6323a9610d6fe6ebc8aa514639950069291844d5fbcbb62c5f04ff9cc125f5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175764

Malicious code in ursa-mui-rest-xerxes npm...

Malicious code in nu-interpret-container-grep-bad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fcf0f0b56c9bcce303f3f0b00cd434d5f276b06967ac7541976361325bfcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179973

Malicious code in brane-nashira-cluster-spawn npm...

Malicious code in geoarchaeology-hologram-xerxes-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed54989fbcb5736d4c2e1a525981e4144b30d7880a6e267468e8ee8ec1c7f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178954

Malicious code in express-proxima-websockets-leda npm...

EUVD-2025-177266

Malicious code in perseus-ablation-elara-cryptography npm...

EUVD-2025-180067

Malicious code in biohacking-membrane-json-convict npm...

Malicious code in sublimation-archaeoastronomy-browserify-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba32b52b1e4bbb964b6534537b4d98d51c9e74683dea1516424471f869c0e5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...