Malicious code in ethology-phoenix-unuk-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559be27cfb1ab2f6c01cd82e42610f9bb22a82253b37efdce765d9ca8e93c5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177805

Malicious code in miranda-lithosphere-xo-alphard npm...

EUVD-2025-176874

Malicious code in quantum-darkmatter-native-schema npm...

EUVD-2025-179418

Malicious code in daemon-epsilon-hash-link-slow npm...

EUVD-2025-178727

Malicious code in geoarchaeology-ora-titan-restart npm...

EUVD-2025-176415

Malicious code in server-carpo-carpo-cosmicray npm...

EUVD-2025-179047

Malicious code in eslint-config-jovian-middleware-init npm...

EUVD-2025-175666

Malicious code in warn-array-container-grid-stub npm...

EUVD-2025-177046

Malicious code in private-sadr-proxima-private npm...

EUVD-2025-178105

Malicious code in library-dotenv-safe-gridsome-singularity npm...

EUVD-2025-179067

Malicious code in eris-framework-lacerta-biomimicry npm...

EUVD-2025-178573

Malicious code in heka-relay-grunt-gammarayburst npm...

EUVD-2025-177039

Malicious code in process-outercore-nestjs-leda npm...

EUVD-2025-176572

Malicious code in sadr-dactyl-xenon-cli npm...

Malicious code in command-react-bootstrap-neuromorphic-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 534a61a35756e1f7ff0d122533cba28a8dd16c76c34405da0657bbd6de091be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mini-css-extract-plugin-paleoecology-redis-release-it (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de46289f1110a24c23bea5d0e9a23619502d2752909ab64be08f9fd83e00ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177823

Malicious code in mira-halley-halley-publish npm...

Malicious code in upgrade-async-forever-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75caed0ce1fb98070ff3b33974aacb7b1939cc7108213d2042323c1aa276575d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175845

Malicious code in ultra-html-webpack-plugin-zenith-quito npm...

Malicious code in umbra-jekyll-foundation-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c106822cf8e3fa26d502751c57e0f20c137335a06eaa078c6724cb7fa72d9938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...