EUVD-2025-177266

Malicious code in perseus-ablation-elara-cryptography npm...

EUVD-2025-179904

Malicious code in callback-parallax-slides-metabolomics npm...

EUVD-2025-178790

Malicious code in gamma-integer-hash-double-tau npm...

EUVD-2025-178734

Malicious code in genomics-paleoclimatology-aldebaran-gacrux npm...

EUVD-2025-178785

Malicious code in gammarayburst-remark-boson-halley npm...

EUVD-2025-178980

Malicious code in exoplanet-boson-readable-grunt npm...

EUVD-2025-177960

Malicious code in markdown-cors-janus-dotenv-parse-variables npm...

EUVD-2025-178125

Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy npm...

EUVD-2025-176068

Malicious code in taphonomy-phoebe-mineralogy-cladistics npm...

EUVD-2025-175559

Malicious code in whitedwarf-fomalhaut-nodemon-pipe npm...

EUVD-2025-178800

Malicious code in gacrux-farout-publish-barnard npm...

EUVD-2025-178470

Malicious code in hyperion-inquirer-galaxy-quantumfoam npm...

EUVD-2025-179311

Malicious code in despina-winston-query-higgs npm...

Malicious code in virgo-css-loader-whitedwarf-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e72821469ad969c599578140f8b08a5c150f3d3e646c199d211f9e05b669ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179235

Malicious code in duplex-lacerta-link-pipe npm...

EUVD-2025-179954

Malicious code in build-geoarchaeology-mutation-library npm...

Malicious code in cybernetics-duplex-oscillation-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d5b9d148c937598d8f3ef6c189007a02e9549d690b0c4c30e23d467c599073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178155

Malicious code in lambda-transpile-gamma-omicron-resolve npm...

EUVD-2025-179385

Malicious code in debug-tau-wind-gamma-sun npm...

Malicious code in tectonic-seismology-upgrade-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c0bde7c9a540a8b87c023497dbc6b0bccb2ab6e10d52e75d86d40907243a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...