Malicious code in fast-table-import-async-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b7711575f733c9e98b03e3824ef5b1c29085d432948d8c4df9b454932c4f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arcturus-nucleosynthesis-commitizen-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c059255ede275e21e5d68337bb9005b3814fb3f5f7d935ee2d55255bd2a1a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-vuepress-antares-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcf0668bcdb957f83f8e10040b7ab393c0cb92bdc061a5e437566c48e7481c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177663

Malicious code in neptune-grus-fusion-sass-loader npm...

EUVD-2025-177348

Malicious code in paleontology-lyra-hercules-protractor npm...

EUVD-2025-179558

Malicious code in corvus-javascript-charon-semantic-ui npm...

EUVD-2025-179487

Malicious code in cryonics-magellan-bionics-tardigrade npm...

Malicious code in centauri-mesosphere-deneb-solarnebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7fe577b56fcae0f18e8a9da6f6515f83d22eb7cf08237af200ee4ca5977f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mira-pipe-stratigraphy-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a737e899eebfc93719ad05ec9c57d48a39e9ff003452bde12f51658c501679d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177343

Malicious code in paleontology-tailwindcss-tethys-jekyll npm...

EUVD-2025-176643

Malicious code in rho-mu-catch-double-cloud npm...

EUVD-2025-177034

Malicious code in procyon-cluster-janus-fomalhaut npm...

EUVD-2025-177273

Malicious code in pegasus-xo-charon-karma npm...

Malicious code in europa-alphard-docusaurus-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfd12c80aa354e4a81290deca797d5a0670d28e73a14c4d60a450ca24efb9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180343

Malicious code in arcturus-magellan-bellatrix-quasarjet npm...

EUVD-2025-176922

Malicious code in publish-oscillation-astrochemistry-spectron npm...

EUVD-2025-177452

Malicious code in oortcloud-chariklo-geoarchaeology-cli npm...

EUVD-2025-180320

Malicious code in array-load-sandbox-code-cache npm...

EUVD-2025-178460

Malicious code in ichnology-ursa-petrology-cluster npm...

Malicious code in pegasus-nightwatch-andromeda-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456007ea7c3c7aa65a04e3206fa87137b64b1fb64e3134e83f1cae387acbc74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...