EUVD-2025-178778

Malicious code in ganymede-metabolomics-cryptography-metalsmith npm...

EUVD-2025-177096

Malicious code in postcss-loader-ganymede-metalsmith-farout npm...

EUVD-2025-179227

Malicious code in dynamo-run-script-jasmine-kuiperbelt npm...

EUVD-2025-176717

Malicious code in relay-tardigrade-typeorm-cli npm...

EUVD-2025-175449

Malicious code in yaml-kappa-integer-uglify-serialize npm...

EUVD-2025-178570

Malicious code in heliophysics-blackhole-ganymede-cluster npm...

EUVD-2025-175658

Malicious code in warp-asthenosphere-ganymede-publish npm...

Malicious code in soap-slidev-carpo-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae0139684ff37091484c18ca8bc5d4cf9f1515aa5a2f6022fb21a338af537e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transhumanism-release-it-neptune-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d39b3f66ea8caa13effea3b58e8a9279c4089d79de52f175ab5a325c1df8faa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cluster-protected-resolve-cloud-refactor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16bf76a6aad62a8326f2acada064db0631acce7a0d63f70078133976b476da61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175669

Malicious code in vulcan-quasar-prettier-europa npm...

EUVD-2025-175585

Malicious code in webpack-quantum-babel-dione npm...

Malicious code in easy-pipe-signal-proxy-uglify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cced811f8b7d7d11ae1da05db78dd95c88ffed00ef920a419f7b559ae4c66c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in barnard-perseus-comet-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6eebdf9f0730fb227de48935bda8ce5464b39db7760ccf5d354d4599c57b658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178223

Malicious code in kappa-notify-web-encrypt-iota npm...

Malicious code in quantum-norma-canopus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89cc616e1c86db519ac69507809139300362341a112b7750cd00848d92ec1602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177474

Malicious code in old-reject-mu-char-decrypt npm...

Malicious code in sync-vega-apex-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7049cee782d42510430e26832fb304bb48636354de220eb85f797b763b0df0d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178862

Malicious code in fork-object-protected-data-fork npm...

Malicious code in neutronstar-regulus-sqlite-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd76a2dd4b6f1c8374b68d6f578a4c53895f8cdc8fad0504324a71a8377a5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...