EUVD-2025-175835

Malicious code in umbra-mensa-bunyan-non-blocking npm...

EUVD-2025-175490

Malicious code in xerxes-non-blocking-baryon-solarnebula npm...

EUVD-2025-177542

Malicious code in non-blocking-miranda-gridsome-cosmicray npm...

EUVD-2025-177513

Malicious code in nucleosynthesis-standard-pulsar-non-blocking npm...

EUVD-2025-177492

Malicious code in octans-non-blocking-repository-cosmiconfig npm...

EUVD-2025-177324

Malicious code in parcel-non-blocking-bulma-chakra-ui npm...

EUVD-2025-178836

Malicious code in framework-release-it-fornax-non-blocking npm...

EUVD-2025-178557

Malicious code in helmet-pegasus-non-blocking-phoebe npm...

EUVD-2025-178462

Malicious code in ichnology-eventhoriz-grus-non-blocking npm...

EUVD-2025-179411

Malicious code in dagda-non-blocking-html-webpack-plugin-astrophysics npm...

EUVD-2025-179183

Malicious code in electron-builder-kaus-non-blocking-europa npm...

EUVD-2025-180068

Malicious code in biohacking-hexo-nebula-non-blocking npm...

EUVD-2025-179883

Malicious code in capella-non-blocking-avior-jabbah npm...

MAL-2025-146631 Malicious code in promise-aether-private-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e995c1fb742ffaa236c62457efe3e86f89afb596a418f5b4fec72fee723daec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148992 Malicious code in update-chai-non-blocking-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf2732f6a507f3ea2e09ca7ff7251f8705a48a4d88fad8e4c2827383fd31c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149225 Malicious code in vulcan-browserify-non-blocking-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f75a901684e76d93228851b85ee37e80b481a39a673e1769eefa38f79d23ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145621 Malicious code in non-blocking-sqlite-comet-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4565c829ba2e5b0b1cab2a792e2ee7ab03d4a61f041503d12bef51bd72b837f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143804 Malicious code in janus-cors-non-blocking-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab10dd4a20efdee524a8a1e195d284589d12d19dfdb7436f4055a944dc3aa658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145629 Malicious code in non-blocking-ursa-postgres-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a3fdd105ee5de4d8319f3c1fc42c4e5a68d5c3842e883524063669fbdc8004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145622 Malicious code in non-blocking-sqlite-toml-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2d064b51a14b25c29553073d981f25fb78805790a2a4cbb554a1dc26efbc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...