EUVD-2025-178885

Malicious code in flare-polaris-sadr-alphard npm...

Malicious code in bunyan-resonance-mensa-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65863ee55838a0a6002f037f8899a14e638e0c1328dce784f74dfa7763be464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-wezen-parsec-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4367c9173dd0932914381799df03057fc34021e6580643e35e3ac7264eeea6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179761

Malicious code in char-cat-execute-eta-authenticate npm...

EUVD-2025-176956

Malicious code in proxima-shelljs-spinner-brane npm...

EUVD-2025-177207

Malicious code in phoebe-react-bootstrap-heliophysics-nebula npm...

EUVD-2025-180430

Malicious code in antares-aether-run-script-pino-pretty npm...

EUVD-2025-179477

Malicious code in cryptography-webdriver-manager-schema-test npm...

EUVD-2025-179319

Malicious code in deserialize-double-simulate-interpret-tau npm...

EUVD-2025-179472

Malicious code in csrf-farout-backend-fomalhaut npm...

EUVD-2025-180141

Malicious code in bad-xml-simple-yaml-reject npm...

EUVD-2025-175527

Malicious code in xanadu-ganymede-thuban-polaris npm...

Malicious code in runtime-short-fork-yaml-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31da8d79938c0877172eace97de977d62cd6cef0bdb976f8e1c9a90372aa944f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179794

Malicious code in chakra-ui-fornax-umbriel-wezen npm...

EUVD-2025-178762

Malicious code in gatsby-config-postgres-concurrently npm...

EUVD-2025-176918

Malicious code in publish-sadr-event-readable npm...

Malicious code in cz-conventional-changelog-heliophysics-carpo-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b43b39469f3044ffca305f0206cc9adcde03611a0fd8cf39b08d0230171522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177077

Malicious code in prettier-meteor-mineralogy-vuepress npm...

EUVD-2025-175764

Malicious code in ursa-mui-rest-xerxes npm...

Malicious code in pipe-parallax-build-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec5faf367fbd475f2fc169c244b05e140099de8dafa401f9a7d433ad56520b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...