Malicious code in cz-conventional-changelog-heliophysics-carpo-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b43b39469f3044ffca305f0206cc9adcde03611a0fd8cf39b08d0230171522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178688

Malicious code in google-bionics-flare-biogeochemistry npm...

Malicious code in deneb-juno-virtualreality-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ab08056ce07e4b0fa7e42cc1a807d96b6b0be4eece882b85ff70488bfca3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175893

Malicious code in transport-babel-dagda-electron npm...

EUVD-2025-175456

Malicious code in yakutsk-server-hydrogeology-saturnology npm...

EUVD-2025-176432

Malicious code in sequelize-eris-europa-sails npm...

EUVD-2025-176804

Malicious code in radiometric-nova-rocket-transport npm...

EUVD-2025-178906

Malicious code in file-sed-hash-xi-sed npm...

EUVD-2025-179163

Malicious code in emulate-await-sudo-code-grid npm...

Malicious code in earth-small-scale-simulate-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fb4a6ae7bf4b0905de3d73d4d9b8c46faf60e8c2e993b8f02590be8e6893e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180145

Malicious code in bad-old-deserialize-bundle-boolean npm...

EUVD-2025-176329

Malicious code in small-bundle-function-minify-query npm...

EUVD-2025-176679

Malicious code in resolvers-forever-mongoose-multiverse npm...

EUVD-2025-179925

Malicious code in byte-nu-monitor-module-static npm...

EUVD-2025-176514

Malicious code in saturnology-enceladus-jest-xml npm...

Malicious code in cat-compile-analyze-deploy-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9514ab2e174c3c41eef9112756070b30355f2acf2e0db624c254b0fbd779b0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-wavefunction-test-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f380280d6a4001277413145152d77591136530660904e107761654fa22ec727e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180498

Malicious code in aether-foundation-request-tectonophysics npm...

Malicious code in soap-slidev-carpo-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae0139684ff37091484c18ca8bc5d4cf9f1515aa5a2f6022fb21a338af537e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiometric-vega-element-ui-oortcloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1260fed5837dd3c43bd4ecea72add038d82fbcf75ec543f03ca004f630806fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...