EUVD-2025-179934

Malicious code in bunyan-radioastronomy-interstellarmedium-outercore npm...

EUVD-2025-178097

Malicious code in lightyear-cors-quasar-procyon npm...

Malicious code in epsilon-catch-cold-beta-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07eb346f6c1bd850321de8cf4d2c038bc01bd3f69145e866d7ca9c0199128ef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-pipe-version-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb83a59ef222bd5e5aeed91986f77fa69c191bb0dc1819dfd9eb913e08908872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-loopback-delphinus-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86bd51a45b3ad13b8d4799d005c23c7a3c15863d564a5a40eeff8179e9414fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-pulsar-plutology-astrochemistry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7119678a00523fb454aee015dc8349a8b07748c775b4a6d48223cfa6da03a0d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177696

Malicious code in native-thermosphere-hermes-server npm...

EUVD-2025-176587

Malicious code in route-proxy-alpha-export-monitor npm...

EUVD-2025-178096

Malicious code in lightyear-ichnology-transform-phoebe npm...

EUVD-2025-179879

Malicious code in carina-solis-ultra-rimraf npm...

EUVD-2025-176386

Malicious code in sigma-query-interpret-phi-process npm...

EUVD-2025-177150

Malicious code in pipe-resolve-signal-uglify-eta npm...

EUVD-2025-177065

Malicious code in prettier-stylelint-astrobiology-loopback-sirius npm...

EUVD-2025-178598

Malicious code in hash-table-enum-debug-unix npm...

EUVD-2025-177539

Malicious code in norma-sagitta-bellatrix-postgres npm...

EUVD-2025-177288

Malicious code in pegasus-filament-meteor-impulse npm...

EUVD-2025-175485

Malicious code in xi-grid-module-sed-warn npm...

EUVD-2025-180152

Malicious code in bad-cron-easy-daemon-compile npm...

EUVD-2025-177518

Malicious code in nu-double-import-theta-old npm...

Malicious code in css-loader-rehype-toml-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aea947ad56b347dfbca7085c787f5e8d56e43c3c86d54d8c56f6bb58e166be46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...