EUVD-2025-178002

Malicious code in luna-sequelize-markdown-pdf-meissa npm...

EUVD-2025-179827

Malicious code in centauri-troposphere-umbriel-decoherence npm...

EUVD-2025-176973

Malicious code in protractor-stream-frontend-dynamo npm...

Malicious code in cloud-water-old-moon-wind (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6319ff7b420cb0dd56f67db0f75f27c89f1cc43360a9ca664fd1a8b8668b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179702

Malicious code in cluster-decompress-double-encode-quick npm...

EUVD-2025-177082

Malicious code in postgres-soap-apex-vortex npm...

EUVD-2025-180522

Malicious code in abstract-hash-key-report-load npm...

Malicious code in aldebaran-polaris-materialize-xenobiology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cdab6672cb9c2ed6728b1014033a902987d96a9e4564b2ae56194180753ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176292

Malicious code in solarnebula-betelgeuse-mui-apollo npm...

EUVD-2025-179186

Malicious code in elara-magnetar-asteroid-cosmicray npm...

EUVD-2025-176961

Malicious code in proxima-kronos-charon-membrane npm...

EUVD-2025-180342

Malicious code in arcturus-nucleosynthesis-commitizen-ini npm...

Malicious code in speleology-phenomic-nova-resonance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0964688b47d97de3d008dd858b6c40cbbefa462b69aed624467438e4722a340c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179355

Malicious code in delphinus-paleoclimatology-stream-wezen npm...

EUVD-2025-179836

Malicious code in centauri-filament-private-on npm...

EUVD-2025-176089

Malicious code in sync-taurus-cluster-webpack npm...

Malicious code in materialize-dotenv-safe-sublimation-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefa120636cfd6f73b190f56220380ce77849e4a839a8559d1106992e1aa7d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176945

Malicious code in psi-monitor-old-hot-dog npm...

Malicious code in query-sed-hash-mu-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e5ff46385a6c398888d0e98adb6298c90d848a3297da7da247fba314dd47ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-express-terser-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f9521da351568b57666d90d27cd93da483825173809d96571f3dd28e990f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...