EUVD-2025-177140

Malicious code in planetology-deneb-betelgeuse-ini npm...

EUVD-2025-177232

Malicious code in phenomic-avior-greatfilter-boson npm...

EUVD-2025-180515

Malicious code in acamar-higgs-izar-deneb npm...

EUVD-2025-178200

Malicious code in key-kernel-transpile-test-yaml npm...

EUVD-2025-176319

Malicious code in soap-nconf-europa-kronos npm...

EUVD-2025-177856

Malicious code in meteor-jupiter-jupiter-xanthus npm...

Malicious code in terraforming-astro-virgo-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a183fa87002850d00bdd17934b7cf22fb2ada6f42a83f55d806e8be99a42534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-elara-europa-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225bb3e548d67feeafaf0b3128b6664fe27c2d00f7626f199697d9775e813e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-convict-carina-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ac39405d373fe12213e8d3838763c38a7674b0f4ecae50d5bc7ddfdd67f77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179157

Malicious code in emulate-sudo-query-balance-air npm...

Malicious code in resolvers-gemini-abiogenesis-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5dda2fa8b3e9bc89cce4d92ddac40e9bb5fc020c4b5cfe2e22051879511d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177911

Malicious code in meissa-markdown-iota-vortex npm...

Malicious code in nconf-middleware-extremophile-cosmicweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d50417b20169e15bf51384ccf1ce983d58f6d92fee9ea5ee2b2023b81eb2006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176095

Malicious code in supervisor-cosmology-element-ui-rigel npm...

EUVD-2025-178287

Malicious code in java-theta-theta-zero-static npm...

Malicious code in transport-command-tachyon-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0edf236c6cd49684316b7dc0c0aa1202a6536332e740642610fe27705c86625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179306

Malicious code in development-kinetic-mocha-equinox npm...

EUVD-2025-176654

Malicious code in restart-virtualreality-cli-spectron npm...

EUVD-2025-177895

Malicious code in mesosphere-exobiology-sedna-baryon npm...

Malicious code in pegasus-xo-charon-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181224c30ecd7ac564d8ca1c19e9898a3d4893ef3135055451b9a6683c264f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...