EUVD-2025-177005

Malicious code in prompts-flare-celeste-sedna npm...

Malicious code in airbnb-mini-css-extract-plugin-centauri-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 827f6e45379c72e896fa2c8a42159e2ada3a7553eef28d5b9d72873afc1ac74f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179168

Malicious code in element-ui-jabbah-chalk-enceladus npm...

EUVD-2025-180334

Malicious code in areology-eleventy-cassini-filament npm...

EUVD-2025-180041

Malicious code in biotechnology-planckscale-nightwatch-bellatrix npm...

Malicious code in cluster-tool-quasarjet-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d3dfb3f3920e3a072a4e1193a85adde9b2af5801f438ea99da4553b52e6154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175932

Malicious code in toml-airbnb-cosmicsilence-bionics npm...

EUVD-2025-175424

Malicious code in zenobia-mdx-phoenix-kronos npm...

EUVD-2025-177026

Malicious code in procyon-slidev-process-webpack npm...

EUVD-2025-177110

Malicious code in polaris-parcel-ora-quasar npm...

EUVD-2025-178724

Malicious code in geochemistry-izar-farout-uninstall npm...

Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9921124b23b8c3333632e1a5ad8852823bbc42e2f37bc4ab4272265763d84cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176198

Malicious code in stratigraphy-stream-module-deneb npm...

EUVD-2025-179449

Malicious code in csv-puppeteer-phoenix-event npm...

Malicious code in yaml-cache-sails-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af495e448a44b27ba05a7124ae72a767dbc8c0ee4b614c3f1fe4155da6a49a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177734

Malicious code in multiverse-perseus-ignite-ceres npm...

EUVD-2025-175396

Malicious code in zeta-lambda-info-view-star npm...

EUVD-2025-179957

Malicious code in build-eleventy-deneb-gemini npm...

EUVD-2025-177217

Malicious code in phi-transpile-delta-table-unix npm...

Malicious code in blazar-quark-publish-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6051df5e76609f10fbecf1f58e20ad09d8098ec4fed4723d9a81bca13555b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...