Malicious code in bulma-interferometry-mesosphere-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd849704bf71e9d336811ba1de97471e6c1bcb7ebb97e7674bce3214b8b4898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175408

Malicious code in zephyr-neptune-dactyl-aurora npm...

EUVD-2025-176262

Malicious code in spectron-ursa-yonder-command npm...

EUVD-2025-178105

Malicious code in library-dotenv-safe-gridsome-singularity npm...

EUVD-2025-176381

Malicious code in signal-authenticate-cluster-await-byte npm...

EUVD-2025-176091

Malicious code in sync-decoherence-xanthus-express npm...

Malicious code in grep-fire-throw-web-sed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf7689d3d15f023a0d962a1dc51e8ad684feb14bbc8cc9a82f6b8716822f137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177251

Malicious code in perseus-query-halley-selenology npm...

EUVD-2025-176256

Malicious code in speleology-ganymede-halley-panspermia npm...

EUVD-2025-177924

Malicious code in mechatronics-augmentedreality-hapi-jupiter npm...

Malicious code in grep-zero-sigma-log-big (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020bdc661008d1ca86daa3eb62afcbdecc07a425fb2f82320f1bdba3b5c51f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180155

Malicious code in backend-exec-husky-public npm...

EUVD-2025-177125

Malicious code in plutology-async-firebase-run-script npm...

EUVD-2025-177921

Malicious code in mechatronics-deneb-bunyan-radiant npm...

EUVD-2025-180056

Malicious code in biomimicry-kuiperbelt-castor-hugo npm...

EUVD-2025-175951

Malicious code in throw-async-object-public-integer npm...

EUVD-2025-178080

Malicious code in lint-antares-luna-nashira npm...

Malicious code in umbriel-spica-rate-limiter-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24a2c3e8a9bab387f482012d72bbd73ca8104bd9ac31e0303a0cd6bd10374ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-capella-auth0-planetology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73e61530abddf10af54e4b3e7e468fb6e763ffe1f4059aec6a0de811685b393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiverse-perseus-ignite-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e2dc25fda56b320b22f7aaa8af3bf5680fb5d97128cb6cfe22f2435a8dfc067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...