EUVD-2025-176445

Malicious code in selenium-dotenv-parse-variables-gacrux-vega npm...

EUVD-2025-179012

Malicious code in europa-lynx-janus-repository npm...

EUVD-2025-177844

Malicious code in middleware-css-loader-eigenstate-pavo npm...

EUVD-2025-175564

Malicious code in wezen-hexo-update-lithosphere npm...

EUVD-2025-179361

Malicious code in deimos-selenium-local-futurology npm...

Malicious code in css-loader-mui-wasat-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53cad67075a8415d525e1cafbcd4ef14fbb3971d78c9c0a1085f10f86fb472d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-markdown-pdf-jsonp-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bff23cd8057496204d56ef6a563c25287b1811afc993a576c7b38a7606534e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technocracy-neptunology-entanglement-whitedwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a714060d334a3130ad7599f72fbbeacd26069ba90c6a06c2bd81ea9eedcf8e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177574

Malicious code in node-config-mini-css-extract-plugin-bellatrix-update npm...

Malicious code in beta-try-omicron-orchestrate-analyze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40241994a51d236f94131d470823d6b7102b40d2be0b6ee91870c93a7ef67ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176081

Malicious code in table-private-module-zero-fork npm...

EUVD-2025-179285

Malicious code in docusaurus-robotics-supercluster-sublimation npm...

EUVD-2025-177488

Malicious code in octans-yakutsk-dotenv-leda npm...

Malicious code in europa-alphard-docusaurus-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfd12c80aa354e4a81290deca797d5a0670d28e73a14c4d60a450ca24efb9d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-hyperion-cypress-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c3120a7bcc6b643e7ee8de6d0ac0d7396a197a63da497db369d04c59ebc39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176378

Malicious code in signal-throw-pi-sun-sigma npm...

EUVD-2025-177034

Malicious code in procyon-cluster-janus-fomalhaut npm...

Malicious code in polaris-winston-cryonics-palynology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5e7d42f185ed3a6589e791dac133bceb2f0d294c95c473ef0661645b658ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175401

Malicious code in zero-finally-new-easy-phi npm...

Malicious code in serialize-final-beta-deserialize-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bba06b449243111553ecbf6df8c3d97715228b596350a22e37f1b8ef6deff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...