EUVD-2025-179533

Malicious code in cosmochemistry-transport-primatology-xenos npm...

EUVD-2025-175719

Malicious code in virgo-build-equinox-init npm...

EUVD-2025-176195

Malicious code in stratosphere-speleology-rollup-plugin-hapi npm...

Malicious code in emulate-catch-file-mu-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780b4f9548afe60317b667414bbc56a8f0601ac37ed12885df88706ecec718ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177076

Malicious code in prettier-oberon-unuk-semantic-ui npm...

Malicious code in stream-redis-bellatrix-oscillation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28d234dac2b514572f66ad2ad3ccae3cc70103cf5b2461fedbff81f34bb2353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176072

Malicious code in tailwindcss-bunyan-spica-perseus npm...

EUVD-2025-177254

Malicious code in perseus-metalsmith-acamar-iota npm...

Malicious code in resolve-code-sun-sanitize-fast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdbdcc8fb619c74fdb9b14089fa86dadcd27a20aad53d18bd359bd1f2d0664b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178923

Malicious code in fetch-readable-spectron-convict npm...

EUVD-2025-177909

Malicious code in meissa-pavo-asthenosphere-aurora npm...

EUVD-2025-176081

Malicious code in table-private-module-zero-fork npm...

EUVD-2025-177008

Malicious code in promise-yonder-lint-pyxis npm...

EUVD-2025-176378

Malicious code in signal-throw-pi-sun-sigma npm...

EUVD-2025-178781

Malicious code in ganymede-flare-aurora-membrane npm...

Malicious code in tectonophysics-paleoanthropology-pegasus-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ceffeea78e713fda29ff11bd8a85a44edec98204994151a3e0232ca19dae572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-adonis-dotenv-parse-variables-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f796a64813b30c1c12b1198d74b70b219329a69f9abb0697a70bb9cde818dc7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180463

Malicious code in algol-airbnb-eslint-config-elara npm...

EUVD-2025-179855

Malicious code in cat-air-xi-slow-visualize npm...

Malicious code in release-it-apollo-norma-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21720d221c3af640d8dc3cbd4404fd10878947a67b82f019946f024f4ca1bd45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...