Malicious code in figures-proxima-sedna-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d0b9329c538d56e5c03a9784fb71627128b7a5d0af3687c492dcdac386fa18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177705

Malicious code in native-docusaurus-xerxes-unuk npm...

Malicious code in polaris-parcel-ora-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a6e796dc58fc1cd8ce228f6a9f7265536d1cd77c4ce0a8d3d2704dc4e4ac18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189894 Malicious code in testcafe-chalk-magellan-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0defc1c288c0f0de3ca469123bec775b3116760a84b9dde2403275871040b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185708 Malicious code in awk-node-public-interpret-cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e72184d33130eb0661746bef8ae65da6a9d81b8319bca387ad8374ec909da7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176443

Malicious code in selenium-neptunology-nucleosynthesis-axios npm...

EUVD-2025-180077

Malicious code in big-static-delta-private-cache npm...

EUVD-2025-176352

Malicious code in sirius-scorpius-sirius-parsec npm...

EUVD-2025-176260

Malicious code in spectron-webdriver-commitlint-apollo-mysql npm...

EUVD-2025-175801

Malicious code in update-barnard-rigel-readable npm...

EUVD-2025-176538

Malicious code in sandbox-final-enum-export-emulate npm...

EUVD-2025-178893

Malicious code in firebase-ganymede-registry-async npm...

EUVD-2025-177389

Malicious code in package-process-helios-markdown-pdf npm...

EUVD-2025-179278

Malicious code in dog-water-double-sudo-export npm...

EUVD-2025-178048

Malicious code in local-astro-inquirer-neptune npm...

Malicious code in centaurus-biohacking-mongoose-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d482681a1746eaaa1bbde7130dfb8ec74d55c296d84140f66286c3dcaea82c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178875

Malicious code in fomalhaut-restart-loglevel-forever npm...

EUVD-2025-180484

Malicious code in airbnb-arcturus-enif-kastra npm...

EUVD-2025-178158

Malicious code in lambda-cloud-class-public-meta npm...

Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d49cf4e544253b65eeab4ed53118e7a101dca71f9c8857859e37df800820da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...