EUVD-2025-180150

Malicious code in bad-grep-web-private-cat npm...

EUVD-2025-180129

Malicious code in baryon-helmet-apollo-meteor npm...

EUVD-2025-180498

Malicious code in aether-foundation-request-tectonophysics npm...

EUVD-2025-180508

Malicious code in achernar-hermes-centauri-module npm...

EUVD-2025-179727

Malicious code in cladistics-geochemistry-vortex-panspermia npm...

EUVD-2025-180532

Malicious code in abiogenesis-cluster-astrophysics-epigenetics npm...

EUVD-2025-179696

Malicious code in cluster-sirius-promise-neutrino npm...

EUVD-2025-179804

Malicious code in chai-greatfilter-phoenix-nconf npm...

EUVD-2025-179918

Malicious code in cache-mensa-leda-build npm...

Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70dc2863be0d9933feb9f50a9c64d52707a31a7128d733acb26dcaf70e489128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176081

Malicious code in table-private-module-zero-fork npm...

EUVD-2025-176924

Malicious code in publish-magellan-magnetosphere-paleomagnetism npm...

EUVD-2025-178322

Malicious code in jabbah-blitz-kardashevscale-markdown npm...

MAL-2025-185895 Malicious code in borealis-hercules-ora-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9629f8a43475f540dbda3704d798a24991f7120a96a82ddb110b11d79e356e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kinetic-ora-bootstrap-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c94144702a359f66450437efd957137a56b3bce619a4b13ed508a050d09d69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-iota-callback-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f60f3a13bf834da1f6e7ea40da360ca3b541224c8dd928490733f69f44b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mantle-mini-css-extract-plugin-singularitarianism-areology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ff722dde20bc419da2c0fab62920ba320fada29e63e642f21743e99b42aab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176453

Malicious code in seismology-configstore-vuepress-global npm...

EUVD-2025-175940

Malicious code in titan-bootstrap-lynx-comet npm...

Malicious code in double-file-encode-moon-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10f8c7b46a34fb8cd76f802a955287a6e735d17496a721553248f24725219d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...