EUVD-2025-176442

Malicious code in selenium-troposphere-nebula-betelgeuse npm...

Malicious code in small-bundle-function-minify-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7181905cc835f11cdac785c854058f183bcc67f7eed82c7a1b53f9b9d89bf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180342

Malicious code in arcturus-nucleosynthesis-commitizen-ini npm...

EUVD-2025-175401

Malicious code in zero-finally-new-easy-phi npm...

EUVD-2025-175642

Malicious code in wasat-photon-await-mocha npm...

EUVD-2025-177456

Malicious code in on-graviton-async-antares npm...

EUVD-2025-176412

Malicious code in server-nebula-cosmiconfig-umbra npm...

EUVD-2025-176437

Malicious code in semantic-release-aether-buffer-concurrently npm...

EUVD-2025-179329

Malicious code in deneb-warp-nucleosynthesis-lepton npm...

Malicious code in atlas-miranda-jabbah-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f020f94c5fdb02b7fc5f82277e35e39660c2c8769968ee2d2469e3286f8e237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176103

Malicious code in superposition-elara-blazar-webdriverio npm...

EUVD-2025-179351

Malicious code in delphinus-vuepress-antares-europa npm...

EUVD-2025-177909

Malicious code in meissa-pavo-asthenosphere-aurora npm...

EUVD-2025-178454

Malicious code in ignite-jekyll-europa-galaxy npm...

Malicious code in dependencies-dynamo-optimize-css-assets-webpack-plugin-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b88c2d2b382ffb9df5c83d2623b4d0be3b8e53cf60c14ef812d31a57ce193e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-phoenix-higgs-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1790af97737c369218f83515854c87aac6243d0a77963daa49b5f8de55a8d564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176924

Malicious code in publish-magellan-magnetosphere-paleomagnetism npm...

Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70dc2863be0d9933feb9f50a9c64d52707a31a7128d733acb26dcaf70e489128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-cors-dysonswarm-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d813d65a50244ad3649baaef287695f9e5c9fcf145c42566664a40f4d368e4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189131 Malicious code in registry-relay-electron-builder-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a67c1995ab1976896034e028ee640c5ae740b13db01b79296b2487d4d3fcf022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...