EUVD-2025-176052

Malicious code in taurus-bootes-jekyll-neptune npm...

Malicious code in cosmos-yonder-grunt-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ec61cd9ccaae23473fa62ba89bdc0cd77a1cf4c2ad714655057db11196e10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178913

Malicious code in figures-miranda-helmet-exec npm...

EUVD-2025-175874

Malicious code in triton-radiant-epimetheus-await npm...

EUVD-2025-178575

Malicious code in heka-neptune-nightwatch-andromeda npm...

EUVD-2025-177024

Malicious code in procyon-yaml-figures-toml npm...

EUVD-2025-179157

Malicious code in emulate-sudo-query-balance-air npm...

EUVD-2025-176731

Malicious code in rehype-mesosphere-orbit-puppeteer npm...

EUVD-2025-176280

Malicious code in spawn-exec-zenobia-ganymede npm...

Malicious code in cache-simple-awk-sudo-class (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 802dd61e2bb009c247c01e639f24d56321322ea9411258462212b63efbbf3525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psi-monitor-old-hot-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06252f89b5ee1e7f2068a36a6609079029edd2ce863bc78470237c11e290d5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180428

Malicious code in antares-apex-robotics-quito npm...

EUVD-2025-178085

Malicious code in link-theta-float-class-balance npm...

EUVD-2025-178741

Malicious code in gemini-joviology-sedimentology-buffer npm...

Malicious code in aldebaran-regulus-bellatrix-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466d3ed4652474b926cfb44ab27373bbae126cc4d987b1c672274fad890cded6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176817

Malicious code in radiant-on-oscillation-indus npm...

EUVD-2025-179601

Malicious code in config-xml-sirius-config npm...

Malicious code in blueshift-perturbation-centauri-paleoceanography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841e48167a2e8941ea52d3d87bb92b2dec4bd11e24239da9550cc850ff6ac3d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biosignature-enif-element-ui-biohacking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4715241285965588427f15c1ffe35a84f94a2a86f96acc208d839b45622dc284 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa0400d978fa965e52d12202d981d0a00f84aed877346a6ddbd17443b12575da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...