Malicious code in link-leda-odin-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75ce4b4c89004a0671609cc9894c898727457ffbd1c7baf91492dcab7c4d92d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entanglement-levels-leda-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e292447f2134db338338d63f8b2a16b4bc83686c388f6b6c05cd2d77c971844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177285

Malicious code in pegasus-mdx-pino-izar npm...

Malicious code in sanitize-sed-transpile-analyze-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0255f3ef4a6d499d802e5dd3e1c3ed31caeb68c77cd945be657b3bf65f132070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177468

Malicious code in omega-test-benchmark-validate-resolve npm...

Malicious code in nodejs-sublimation-blueshift-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac08682d4cef3bfb91188e87215c4cb83b14be68846287602b4b3a4168441f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blueshift-exoplanet-buffer-primatology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d143c1c5b2aab61f831840778fd5711d8bdbdd3009b39af1830df9580dbe9f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178815

Malicious code in fusion-postcss-loader-supercluster-biohacking npm...

EUVD-2025-179785

Malicious code in chalk-mira-procyon-schema npm...

Malicious code in sails-europa-nextjs-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 723695676a287161e3d27b973e94d01b9c7964555c6b08d4112590252c89e581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in signal-authenticate-cluster-await-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9c4b67b3adc6ae2f52304f08d24dafce84d84d9f5fa1ccbc8017c2dc638b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177636

Malicious code in neutrino-radioastronomy-comet-planetology npm...

EUVD-2025-178359

Malicious code in io-octans-taurus-sedna npm...

EUVD-2025-178983

Malicious code in exobiology-callback-commitlint-config-angular-slides npm...

EUVD-2025-179259

Malicious code in dotenv-safe-norma-vuetify-paleomagnetism npm...

EUVD-2025-177983

Malicious code in magellan-bootes-resonance-sedna npm...

Malicious code in water-catch-cloud-upsilon-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee923d12f25e195265318063f9ca7aefda531762b20e5da248f7248ff39084f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177368

Malicious code in paleoclimatology-nova-rollup-vortex npm...

EUVD-2025-175656

Malicious code in warp-dotenv-safe-andromeda-uglify-js npm...

Malicious code in loglevel-event-resonance-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7eec21520de8ed6c0a4d6cca52c2046b026e45372eab13e437e1cd2d38c4f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...