EUVD-2025-177325

Malicious code in parcel-google-webdriverio-sails npm...

EUVD-2025-178407

Malicious code in init-enceladus-quark-terraforming npm...

EUVD-2025-175854

Malicious code in typeorm-xanthus-solis-soap npm...

EUVD-2025-177073

Malicious code in prettier-plugin-markdown-exoplanet-saturnology-frontend npm...

Malicious code in import-debug-compress-byte-long (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ddbf7d87c43bede607efa42308f8dc04a23e0da9d2a8b4f38190d92b71d8080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175859

Malicious code in typeorm-kuiperbelt-miranda-tachyon npm...

EUVD-2025-179175

Malicious code in elektra-bellatrix-neutronstar-spinner npm...

EUVD-2025-177819

Malicious code in mira-wolf-prompts-got npm...

EUVD-2025-179686

Malicious code in cold-bad-theta-epsilon-route npm...

Malicious code in callisto-europa-relay-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8337c1aab47dce5ea62275961be6d7adbca72d2db41dead4570adfb04582fd5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178171

Malicious code in kuiperbelt-phoebe-native-abiogenesis npm...

Malicious code in version-virtualreality-scorpius-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2474968d15e1ae15d7fe3d765d5e06ca8d713e82add09b6ddc4d7083cda699b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178389

Malicious code in inquirer-winston-commitlint-cosmiconfig npm...

Malicious code in nightmare-semantic-ui-init-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dd9e5c43cd91768bb1e1d176eba1c1544754be3fbe8355a892cc84adb8667e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-cosmos-mutation-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5dcd12fa5035265d7d32f99a552f3818f4eb9981fd531d05e5b06531dddd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180361

Malicious code in archaeogenetics-taphonomy-blazar-singularitarianism npm...

EUVD-2025-179825

Malicious code in centauri-xenos-phoebe-heliophysics npm...

EUVD-2025-176263

Malicious code in spectron-pegasus-interstellarmedium-ultra npm...

Malicious code in psi-sudo-key-simulate-double (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ee62d1636d2e3ede1d70eea831e93d894b9e64f3fdca81500b89f12f6071f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-winston-apollo-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c38fb3b8dce0d51fe097f114d49539610b5038bc08488ececd68bce2f3e0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...