EUVD-2025-176603

Malicious code in rollup-plugin-hugo-library-biotechnology npm...

EUVD-2025-179553

Malicious code in cosmiconfig-fermiparadox-parsec-forever npm...

EUVD-2025-175502

Malicious code in xenon-proxima-whitedwarf-jsonp npm...

Malicious code in quasar-promise-kaus-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041ad73f1af79afd5f9b6ca0c4c7ba14072a32c0a2b16fd9c8af00d6bf033c50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-virgo-perseus-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9eabf39821aaededf090315d40c3c4320f647abcd27814fa1d3d9f16e2cdee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176555

Malicious code in sagitta-query-brane-parallax npm...

EUVD-2025-180351

Malicious code in archaeometry-impulse-galaxy-dysonswarm npm...

EUVD-2025-179502

Malicious code in cross-env-cybernetics-juno-iota npm...

Malicious code in changelog-hugo-fusion-tectonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56370b589ac24acf0fc8bca861dd240bb702293f6a90a1ef700afbc9e61584ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177926

Malicious code in mdx-zenobia-altair-colors npm...

EUVD-2025-178607

Malicious code in hapi-dynamo-archaeoastronomy-leda npm...

Malicious code in alphard-comet-transport-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c8d92d35be1e1dfe8247bfe1991bc31f583cadc4ac985cb06952c40c4ae695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-yakutsk-update-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4056139ea2e6931e54f1dbb6be8565d9c94ad19a8e4cc44520c8df7a00ac25f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176597

Malicious code in root-cluster-bad-final-rho npm...

EUVD-2025-179368

Malicious code in deimos-concurrently-outercore-browserify npm...

EUVD-2025-176596

Malicious code in root-fire-user-hash-static npm...

EUVD-2025-179895

Malicious code in callisto-europa-buffer-nodemon npm...

EUVD-2025-179776

Malicious code in chalk-supercluster-repository-morgan npm...

EUVD-2025-176979

Malicious code in protractor-biotechnology-hercules-relay npm...

Malicious code in brane-nashira-cluster-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95958810256e12bc1d81c9af029c889a3b720ed25cf4abef9c6a636340b635b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...