EUVD-2025-177074

Malicious code in prettier-plugin-markdown-aquarius-colors-antares npm...

EUVD-2025-176686

Malicious code in request-gemini-prettier-plugin-markdown-hercules npm...

EUVD-2025-179144

Malicious code in enceladus-sirius-radioastronomy-octans npm...

Malicious code in proxima-shelljs-spinner-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7bd32ce89463fc87f2bf996cd96de28e6fa265c87a586e1414a63e912a88fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178373

Malicious code in interface-iota-tau-optimize-bundle npm...

EUVD-2025-176522

Malicious code in sass-loader-cluster-link-jekyll npm...

Malicious code in browserify-sedna-apollo-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9274311e3df04e5c51c1bd2fd4419846f61128c31217b919fde8910c9c1e8e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-oscillation-supervisor-stratigraphy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24c4ee8a47b6f72647c164486538c1d1765edb3e08b84f85ff8f0e12991b0634 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daemon-function-throw-file-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a73e261a4f17a185bcca6a3ab3abc503be436cc2631043966eea2b64c29a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-config-mini-css-extract-plugin-bellatrix-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0f4cb1363923700e234a126ba9afc3eb8cefa5fbc782a1ed68bce1e6c9fdf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callisto-enif-cryonics-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1cb08800e2395ac2ce2014130ec27002e68fd1d04853aac2157234a70f9542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176758

Malicious code in refactor-cat-epsilon-interface-monitor npm...

EUVD-2025-177005

Malicious code in prompts-flare-celeste-sedna npm...

EUVD-2025-178398

Malicious code in innercore-magnetar-xerxes-galaxy npm...

EUVD-2025-176774

Malicious code in redgiant-gammarayburst-event-miranda npm...

EUVD-2025-176490

Malicious code in scripts-duplex-innercore-mongoose npm...

EUVD-2025-180442

Malicious code in altair-async-jabbah-radioastronomy npm...

EUVD-2025-179399

Malicious code in darkenergy-regulus-hadron-elektra npm...

EUVD-2025-177788

Malicious code in mock-string-simple-final-data npm...

Malicious code in publish-webdriverio-event-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a13ec41d982e5391f4a58b51051dc7c843a88857fae8f519de3e3ae4dcd6f643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...