EUVD-2025-176572

Malicious code in sadr-dactyl-xenon-cli npm...

Malicious code in biotechnology-corvus-phoebe-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7d89363aa906934aa21323a9e5cbbcbac669a622cb76d058c5bc4794c9529f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179646

Malicious code in command-react-bootstrap-neuromorphic-magellan npm...

EUVD-2025-177540

Malicious code in norma-quantumfoam-loglevel-commitizen npm...

Malicious code in rocket-fomalhaut-sirius-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 344f2bc058eebc6954eb5e9126619426a4e49a9670f2df757ea7590314e6af3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180110

Malicious code in bellatrix-prompts-webpack-paleobotany npm...

EUVD-2025-175724

Malicious code in view-visualize-nu-shell-small npm...

EUVD-2025-177035

Malicious code in procyon-aurora-zenith-indus npm...

Malicious code in got-paleoclimatology-nebula-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c594bf125d3e98c114785d243fe86ffa7d25834160d19bd9debc56f1fabc9f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in table-private-module-zero-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c75ce0251dcdeefdacf81cb4b3bc7b73a647e814e9cb35b7f9ba4a7729ba677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177834

Malicious code in mini-css-extract-plugin-nova-titan-duplex npm...

Malicious code in warn-pi-visualize-catch-slow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd19017ae32cc4971e46154fbd9e20fc1d6dd2eb27e09eefcee04c2372bf184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178798

Malicious code in gacrux-magellan-cluster-version npm...

EUVD-2025-177640

Malicious code in neuromorphic-corvus-rate-limiter-concurrently npm...

Malicious code in orbit-publish-dynamo-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70cea22e2995495ae31f048c41734ea03860fac70bf7d26e7ae19a80dde208ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigel-miranda-cache-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24d18ebd38c79524545d193434c68697eb21e47a21abb2e7f108ae969d00566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179712

Malicious code in cli-webdriver-manager-lint-staged-auth npm...

EUVD-2025-179172

Malicious code in elektra-xml-grus-hugo npm...

EUVD-2025-178759

Malicious code in gatsby-interstellarmedium-vuetify-procyon npm...

Malicious code in run-script-taphonomy-interstellarmedium-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51879f1dbe92808190dfdb4174790001ed7d379658ca47564fa784211fcb2319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...