EUVD-2025-175607

Malicious code in webdriver-mocha-browserify-polaris-cache npm...

Malicious code in gridsome-planckscale-primatology-speleology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7518cedd7951dca7e3b0b962acac9863b47e470220a639cb5aeef37ddee442fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178569

Malicious code in heliophysics-pino-umbriel-request npm...

EUVD-2025-178946

Malicious code in farout-colors-hologram-mini-css-extract-plugin npm...

EUVD-2025-178374

Malicious code in interface-awk-balance-epsilon-orchestrate npm...

EUVD-2025-175504

Malicious code in xenon-graviton-gravity-pulsar npm...

EUVD-2025-180492

Malicious code in aether-radiometric-sedna-phoebe npm...

Malicious code in pino-loopback-private-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7a952b174397738a23c00e9ed18756c998616228c01ba8006756c57704c905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178071

Malicious code in lint-remark-meteor-neptune npm...

EUVD-2025-175716

Malicious code in virgo-joviology-proxima-install npm...

Malicious code in miranda-koa-fetch-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0542faa9fd01fa72c958cf46a1d5a08f0ba4db727709a088052187230321c063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179985

Malicious code in borealis-promise-spinner-ora npm...

EUVD-2025-176926

Malicious code in publish-json-solis-apollo npm...

EUVD-2025-177321

Malicious code in parcel-planckscale-puppeteer-version npm...

Malicious code in server-carpo-carpo-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13b35cab92cb87cd2a1275e1e555ba5cd6cc2d672f9915764840e26cd51e296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutronstar-gravity-aether-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f972bd2bdf22287e5777a5a623ae50acb15807c5fdafe094d797fd69123e914b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179310

Malicious code in development-antares-xerxes-membrane npm...

EUVD-2025-178439

Malicious code in impulse-eslint-config-zenobia-octans npm...

EUVD-2025-176088

Malicious code in sync-uglify-js-rest-superagent npm...

Malicious code in perseus-carina-duplex-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82db29da799b8923adf9e0105b02d015268632fba539c6d56c55e7300b952ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...