Malicious code in lyra-warp-dactyl-interferometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0443e66fbe5e2851fc2339642f366487cc1173568243d8b77eee088e5e787a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-postgres-procyon-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c0aeb02932f948ac72d778e30dc2a45eb788602e06dd414d7abcb985fc34e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177617

Malicious code in nextjs-octans-interferometry-fusion npm...

Malicious code in hapi-prosthetics-thermochronology-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3945b57156407a7defb56a483e3d506c0a307663ac840d78caefe669db00c55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176882

Malicious code in quantum-child-process-vulcan-sagitta npm...

EUVD-2025-177270

Malicious code in permission-eta-float-gamma-psi npm...

Malicious code in string-container-benchmark-phi-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eeddb7aaf4eb14b9f84cab9ef4d5c482fe254563dc9dfb921f8ee860c3b659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-antares-vulcan-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c307536c58204cd3b17873413e4c2936eb8555c5cc85cafc399332a5578418 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179114

Malicious code in enum-proxy-sun-omicron-nu npm...

EUVD-2025-178483

Malicious code in hydra-helmet-terser-webpack-plugin-ignite npm...

EUVD-2025-175788

Malicious code in upgrade-ophiuchus-nightwatch-lyra npm...

EUVD-2025-177661

Malicious code in neptune-ini-apex-ophiuchus npm...

EUVD-2025-178565

Malicious code in helios-fusion-rollup-command npm...

Malicious code in spawn-venus-hydra-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a66e971fd14bdefb13ffa29893acb4ce63a7232109a3f4246fc26be70ddc6ca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180509

Malicious code in achernar-elara-flare-lyra npm...

EUVD-2025-176498

Malicious code in scorpius-chalk-eleventy-kaus npm...

EUVD-2025-179855

Malicious code in cat-air-xi-slow-visualize npm...

EUVD-2025-178912

Malicious code in figures-proxima-sedna-envconfig npm...

EUVD-2025-179777

Malicious code in chalk-stop-indus-module npm...

Malicious code in aldebaran-polaris-materialize-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cdab6672cb9c2ed6728b1014033a902987d96a9e4564b2ae56194180753ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...