EUVD-2025-179999

Malicious code in bootes-global-luna-galaxy npm...

EUVD-2025-179532

Malicious code in cosmogenic-astroinformatics-mesosphere-soap npm...

EUVD-2025-180261

Malicious code in async-psi-alpha-query-theta npm...

EUVD-2025-180392

Malicious code in apollo-aldebaran-miranda-install npm...

EUVD-2025-180120

Malicious code in bash-xml-transpile-good-catch npm...

EUVD-2025-179517

Malicious code in cosmos-yonder-grunt-nashira npm...

EUVD-2025-176081

Malicious code in table-private-module-zero-fork npm...

EUVD-2025-180178

Malicious code in awk-eta-virtualize-route-route npm...

EUVD-2025-177009

Malicious code in promise-vortex-technocracy-transform npm...

EUVD-2025-180396

Malicious code in apex-postgres-procyon-zenobia npm...

MAL-2025-189478 Malicious code in short-easy-cat-mock-daemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7dc557c2e409230293cd798f07cbaedb448573af8880b9f57c7d82c8d0e77c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187191 Malicious code in good-cluster-gamma-fast-finally (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1809c61c48e5efc4e86410252b50b463dd464fa14ffc6adba5f448f3e74756d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176821

Malicious code in radiant-event-bootstrap-geodynamo npm...

EUVD-2025-175417

Malicious code in zephyr-auriga-node-config-wolf npm...

MAL-2025-188379 Malicious code in oauth-zenobia-mechatronics-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a302ded4491038396a7065140b8b3fd0cb60afdd87d680b8a4d45bbf1a26e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metabolomics-steganography-palynology-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bdfca8a1b6545c0a7b689ad4e40447c83ebe94404a409df4c47f8aee747aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177524

Malicious code in nova-sagitta-pegasus-hermes npm...

EUVD-2025-179430

Malicious code in cypress-vuetify-mutation-hermes npm...

Malicious code in uranology-sagitta-cors-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d259b39ce436f6936ead7f53ccab2ac0cf8b65ea6395c27e67242eac3d8cfb7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blaze-transport-genomics-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a961479210925383a0fbf886ccf1a83d0b482d132a4cd67413a4ef5bfa053292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...