Malicious code in uranology-sagitta-cors-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d259b39ce436f6936ead7f53ccab2ac0cf8b65ea6395c27e67242eac3d8cfb7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179781

Malicious code in chalk-pulsar-native-xerxes npm...

EUVD-2025-176636

Malicious code in rigel-photon-interferometry-yaml npm...

EUVD-2025-177332

Malicious code in panspermia-winston-phoebe-adonis npm...

EUVD-2025-178374

Malicious code in interface-awk-balance-epsilon-orchestrate npm...

EUVD-2025-176185

Malicious code in string-avior-heliophysics-tachyon npm...

EUVD-2025-179934

Malicious code in bunyan-radioastronomy-interstellarmedium-outercore npm...

EUVD-2025-175990

Malicious code in test-on-spinner-docusaurus npm...

Malicious code in easy-cron-secure-thread-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d9a4e75826baaad3bfb8184f3a94bbff375967fdd2b655b15a9b74959d6387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177941

Malicious code in materialize-docusaurus-oauth-centaurus npm...

EUVD-2025-179923

Malicious code in byte-root-test-kappa-sudo npm...

EUVD-2025-176926

Malicious code in publish-json-solis-apollo npm...

EUVD-2025-178841

Malicious code in foundation-rigel-pm2-foundation npm...

EUVD-2025-180114

Malicious code in bellatrix-local-puppeteer-epigenetics npm...

EUVD-2025-178759

Malicious code in gatsby-interstellarmedium-vuetify-procyon npm...

EUVD-2025-178109

Malicious code in library-babel-meteor-kronos npm...

EUVD-2025-177781

Malicious code in module-palynology-kronos-fornax npm...

EUVD-2025-179327

Malicious code in dependencies-galaxy-install-module npm...

Malicious code in water-catch-cloud-upsilon-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee923d12f25e195265318063f9ca7aefda531762b20e5da248f7248ff39084f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in async-cluster-await-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7e26dacfa92aa8c4185c16f966db2ea20148611c78d35974fe6e3e7574aab6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...