EUVD-2025-179351

Malicious code in delphinus-vuepress-antares-europa npm...

EUVD-2025-177909

Malicious code in meissa-pavo-asthenosphere-aurora npm...

EUVD-2025-178454

Malicious code in ignite-jekyll-europa-galaxy npm...

Malicious code in dependencies-dynamo-optimize-css-assets-webpack-plugin-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b88c2d2b382ffb9df5c83d2623b4d0be3b8e53cf60c14ef812d31a57ce193e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cypress-phoenix-higgs-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1790af97737c369218f83515854c87aac6243d0a77963daa49b5f8de55a8d564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176924

Malicious code in publish-magellan-magnetosphere-paleomagnetism npm...

Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70dc2863be0d9933feb9f50a9c64d52707a31a7128d733acb26dcaf70e489128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-cors-dysonswarm-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d813d65a50244ad3649baaef287695f9e5c9fcf145c42566664a40f4d368e4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188910 Malicious code in proxima-dagda-tethys-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea648e943b2437d64d35c4b74d17399f38b90f0f2dfd6e329fc14d4bd66bfd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176562

Malicious code in sagitta-izar-dagda-nightmare npm...

EUVD-2025-178719

Malicious code in geodynamo-hydrogeology-ultra-norma npm...

EUVD-2025-175986

Malicious code in test-star-web-zeta-minify npm...

EUVD-2025-178457

Malicious code in ignite-configstore-morgan-kastra npm...

EUVD-2025-176716

Malicious code in relay-xanadu-playwright-miranda npm...

MAL-2025-182242 Malicious code in hitale-irhar-aaeasdeadeasdeadeddaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277223d85a2ec947c05ddf64382978030231ab7fd53a302f8e9fcb630c3b5e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137766

Malicious code in gocay-uga-agidugaufyi npm...

EUVD-2025-137821

Malicious code in astam-ifukilsit-daisikiula npm...

MAL-2025-183989 Malicious code in mitok-doni-olialobna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32f546a2d905e74f501c7602e9828d933adbbfdbb622acafa01211f27ff97c6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183793 Malicious code in masolv-avilo-civbuoiv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9322004d01a907ea47f4a2209e1201f9b10fba868353503b1018cad266223df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-183731 Malicious code in manu-oifads-st01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dead4c459b0cfd179e730419c2163c0f19e700895a6142b5dcea9cd23bd52f59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...