Malicious code in hexo-boson-charon-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56cd66ea725cf1761fe3250a133dfda961733f0870f716905609eae11f5f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178701

Malicious code in global-gridsome-oauth-supervisor npm...

EUVD-2025-179213

Malicious code in easy-emulate-try-psi-balance npm...

EUVD-2025-180173

Malicious code in awk-sun-deploy-key-omega npm...

Malicious code in meteor-cosmochemistry-parsec-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f018f42ff841a03bfe473a2be5b8a5c9547a9ff5fd7162c174cc4bf249906c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180528

Malicious code in abiogenesis-version-magnetosphere-typeorm npm...

EUVD-2025-180512

Malicious code in acamar-xenon-eslint-magellan npm...

EUVD-2025-180043

Malicious code in biotechnology-enceladus-jovian-changelog npm...

Malicious code in dione-dorado-apollo-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dcbc7931eef29ac5c5af7ba06802424115895cf2f3b63f7ae23d400ffbdde7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178191

Malicious code in kinetic-jovian-auth-cache npm...

EUVD-2025-177682

Malicious code in nebula-delphinus-planckscale-juno npm...

EUVD-2025-176336

Malicious code in slidev-rigel-uninstall-dependencies npm...

EUVD-2025-180501

Malicious code in adonis-prettier-stylelint-ignite-magellan npm...

EUVD-2025-177591

Malicious code in nightwatch-ophiuchus-request-quito npm...

EUVD-2025-175673

Malicious code in vulcan-asthenosphere-babel-exoplanet npm...

EUVD-2025-180307

Malicious code in asthenosphere-auth-andromeda-gacrux npm...

EUVD-2025-178272

Malicious code in jovian-development-meissa-configstore npm...

EUVD-2025-175519

Malicious code in xanthus-got-telesto-accretion npm...

EUVD-2025-176352

Malicious code in sirius-scorpius-sirius-parsec npm...

Malicious code in nebula-deneb-winston-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0735a38c36f2def41b0e0f45a429e1d63bd1f07e44636f8161b6c11d78985b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...