EUVD-2025-179201

Malicious code in eclipse-triton-avior-yonder npm...

Malicious code in sadr-nodemon-cosmology-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde5e4eff09a33f1389f7b207284fef123917e01d69344dae811a66121796ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176817

Malicious code in radiant-on-oscillation-indus npm...

EUVD-2025-176024

Malicious code in tectonophysics-transform-crust-sagitta npm...

EUVD-2025-177963

Malicious code in mantle-galaxy-vuetify-pm2 npm...

EUVD-2025-176204

Malicious code in stop-chalk-build-less-loader npm...

EUVD-2025-178774

Malicious code in ganymede-pegasus-xenobiology-pino npm...

EUVD-2025-180491

Malicious code in aether-start-lepton-mdx npm...

EUVD-2025-178719

Malicious code in geodynamo-hydrogeology-ultra-norma npm...

EUVD-2025-178496

Malicious code in hugo-nashira-boson-passport npm...

Malicious code in dependencies-nova-meteor-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501435bf55002173c8f7d5b4c21b3d56892072239bd53de9e1caee62f283e9cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-antares-chakra-ui-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9411bd44509f93d667ced5c6dbbb2a8adf996313e23fb5f37005d64f9a0e6f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-fomalhaut-slidev-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6530e7d524ba18030b212aec51ecb2bc02efc16da675b6d3b84232396518dcf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179167

Malicious code in element-ui-nconf-oauth-webpack npm...

EUVD-2025-179953

Malicious code in build-hapi-registry-quark npm...

EUVD-2025-178907

Malicious code in file-decompress-gamma-wind-object npm...

Malicious code in dorado-development-troposphere-futurology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c034220a0cea0d68987ec959d28c9d17a0464f2ad7d15be247c28fac8f9494b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179063

Malicious code in eris-slidev-iota-css-minimizer-webpack-plugin npm...

EUVD-2025-175669

Malicious code in vulcan-quasar-prettier-europa npm...

Malicious code in redis-acamar-terser-webpack-plugin-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6796676555503346950febf9220667349738f8b77d07e9b3bee2eed252988ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...