EUVD-2025-177960

Malicious code in markdown-cors-janus-dotenv-parse-variables npm...

EUVD-2025-178511

Malicious code in hot-thread-cold-fast-epsilon npm...

EUVD-2025-175424

Malicious code in zenobia-mdx-phoenix-kronos npm...

EUVD-2025-176015

Malicious code in telesto-vulcan-chai-cressida npm...

EUVD-2025-179499

Malicious code in cross-env-geochemistry-global-juno npm...

EUVD-2025-177923

Malicious code in mechatronics-borealis-tardigrade-init npm...

EUVD-2025-176842

Malicious code in quasar-promise-kaus-quito npm...

Malicious code in lepton-husky-phenomic-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8e5f8a7b80fc50583741a5d4fe7563cb8ec3706c4e734dffb7de609c501073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178200

Malicious code in key-kernel-transpile-test-yaml npm...

EUVD-2025-177856

Malicious code in meteor-jupiter-jupiter-xanthus npm...

Malicious code in terraforming-astro-virgo-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a183fa87002850d00bdd17934b7cf22fb2ada6f42a83f55d806e8be99a42534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-elara-europa-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225bb3e548d67feeafaf0b3128b6664fe27c2d00f7626f199697d9775e813e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-convict-carina-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ac39405d373fe12213e8d3838763c38a7674b0f4ecae50d5bc7ddfdd67f77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-gemini-abiogenesis-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db5dda2fa8b3e9bc89cce4d92ddac40e9bb5fc020c4b5cfe2e22051879511d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177911

Malicious code in meissa-markdown-iota-vortex npm...

Malicious code in nconf-middleware-extremophile-cosmicweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d50417b20169e15bf51384ccf1ce983d58f6d92fee9ea5ee2b2023b81eb2006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176095

Malicious code in supervisor-cosmology-element-ui-rigel npm...

EUVD-2025-178287

Malicious code in java-theta-theta-zero-static npm...

EUVD-2025-176654

Malicious code in restart-virtualreality-cli-spectron npm...

Malicious code in pegasus-xo-charon-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181224c30ecd7ac564d8ca1c19e9898a3d4893ef3135055451b9a6683c264f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...