EUVD-2025-175461

Malicious code in yakutsk-blueshift-supervisor-socketio npm...

EUVD-2025-180456

Malicious code in alpha-deserialize-book-upsilon-pi npm...

EUVD-2025-179865

Malicious code in cassini-terser-prettier-mysql npm...

EUVD-2025-175863

Malicious code in try-signal-lambda-execute-kernel npm...

EUVD-2025-175404

Malicious code in zephyr-yakutsk-update-fornax npm...

EUVD-2025-177181

Malicious code in pi-emulate-lambda-alert-sandbox npm...

Malicious code in sass-loader-cluster-link-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 457c2e864673b1e699b6d103dedadc301fb27dd6c6ceb5e99f0f2acfef90a5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180246

Malicious code in augmentedreality-fetch-gravity-hawkingradiation npm...

Malicious code in testcafe-titan-fornax-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505ab67a6297012e58bbbca384b01496596446cd811f997a2a86a2baf414a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179474

Malicious code in csrf-carina-technocracy-areology npm...

EUVD-2025-177903

Malicious code in mensa-fornax-chariklo-geochemistry npm...

EUVD-2025-177926

Malicious code in mdx-zenobia-altair-colors npm...

Malicious code in bunyan-spectron-webdriver-less-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea996c13b6b5a184710be958777615f73170e5e8f3a5e8fb00260064a7d769c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179168

Malicious code in element-ui-jabbah-chalk-enceladus npm...

EUVD-2025-180061

Malicious code in bioinformatics-pino-pretty-mutation-vuepress npm...

Malicious code in fast-java-stub-void-bash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf6d41c7ef745a2b7ef1562477f9a960072b1225abf823fd2d741c10222a6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176699

Malicious code in remark-halley-terser-sagitta npm...

Malicious code in psi-monitor-old-hot-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06252f89b5ee1e7f2068a36a6609079029edd2ce863bc78470237c11e290d5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-cluster-antares-nucleosynthesis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a79c5eb88dbf060771545f41472a61811c8817947e70dc0fc5cc821841efb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185452 Malicious code in analyze-key-simple-long-gamma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e514424d8e9ddb35b422455db45cf7ce03fa1751161b423a15bcbc55cdae5583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...