Malicious code in tectonophysics-paleoanthropology-pegasus-astrophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ceffeea78e713fda29ff11bd8a85a44edec98204994151a3e0232ca19dae572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177831

Malicious code in mini-css-extract-plugin-sass-loader-rigel-koa npm...

Malicious code in emulate-throw-root-meta-file (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222842128022401db2657f4a22c7080f888c13de337235d91c1db8bde19cad82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179800

Malicious code in chai-node-sass-biosignature-tardigrade npm...

Malicious code in remark-loglevel-process-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b2cdb762f4052d4146c3d2d35d10fe3fe6516343cf764c76cc9a051dfc4474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175559

Malicious code in whitedwarf-fomalhaut-nodemon-pipe npm...

EUVD-2025-179974

Malicious code in brane-mocha-elektra-farout npm...

EUVD-2025-178534

Malicious code in hermes-version-mdx-yaml npm...

EUVD-2025-179895

Malicious code in callisto-europa-buffer-nodemon npm...

EUVD-2025-178802

Malicious code in gacrux-betelgeuse-package-webdriver-manager npm...

Malicious code in eslint-webdriverio-mutation-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a6292cce1f88ab7dde9bbac28ffb5bcef257849fd92f06c8f492a70f80981b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178199

Malicious code in key-notify-stack-water-module npm...

EUVD-2025-178625

Malicious code in gulp-yildun-lacerta-webpack npm...

EUVD-2025-180280

Malicious code in astrophysics-mesosphere-neptunology-xml npm...

Malicious code in wezen-hexo-update-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b835942f6a8543c810550c04c687136135ae9e3c47b61eb95bd234b7c13caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178505

Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection npm...

EUVD-2025-175567

Malicious code in weywot-wezen-cryovolcano-auriga npm...

EUVD-2025-177966

Malicious code in magnetosphere-quito-isostasy-despina npm...

Malicious code in archaeometry-yaml-phoebe-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880fcbbb3bbcce9c482ea58ee1f84a2ff2286445d9705d51ab580632d70a051c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-nashira-seismology-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727447041b626199e98814dfab93fcda621b58917fdb68844e29b0b7d8e48327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...