EUVD-2025-176034

Malicious code in technosignature-wezen-blitz-blazar npm...

Malicious code in cli-holography-bunyan-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99709cf279a1a0f87117719e8b2cd54765f1b9ed84a6db8465fdf46399aa064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179236

Malicious code in duplex-init-parcel-test npm...

EUVD-2025-176749

Malicious code in registry-firebase-bunyan-prettier npm...

EUVD-2025-179332

Malicious code in deneb-parallax-aldebaran-prettier npm...

Malicious code in mutation-cladistics-graviton-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b72ad4908dcbef9674d785f529c71aa2981793455c795ac5532487e8fc7328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-asthenosphere-astro-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95609c121da15ecedcbd3376b1932b6054e994e0aa2a3f7a388be310bf6c3de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179049

Malicious code in eslint-config-apex-hermes-zooarchaeology npm...

EUVD-2025-178589

Malicious code in hawkingradiation-jupiter-morgan-equinox npm...

Malicious code in version-aquarius-run-script-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a84d38a922a954fbee7f9e56c1959385eeb12bfe9493e598a5dce063b254ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177046

Malicious code in private-sadr-proxima-private npm...

EUVD-2025-178696

Malicious code in global-sadr-polaris-scorpius npm...

Malicious code in easy-kernel-deserialize-public-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c7f9693c4ee4fd27e0d30c8a5e7c70561a199ab73f1468b17ef1596d9c03dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holography-development-nightmare-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7391f770354c996f96ff917c11fa4926f5234d5852422d6f39e359d9aa7a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178288

Malicious code in java-socket-cluster-decode-catch npm...

Malicious code in metabolomics-steganography-palynology-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bdfca8a1b6545c0a7b689ad4e40447c83ebe94404a409df4c47f8aee747aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jsonp-lacerta-eris-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4338b9067de467c48ebcb22a68da6ba8445e72cde9039197e552af0dcfce6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-standard-epimetheus-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a0e58885cbe1280ac15b1de772db340d444deeaad728af9524fe0139441eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-publish-hexo-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00717e5974b423da54268e70eeedbebfd4bb4bf7ee91f3dd7e0b29ca6d88211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-nuxtjs-enif-superposition (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3df68c1dbb342fe2e72f7fab9e48410d45a2321d9e4454632ee3c0f2b8aeda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...