EUVD-2025-178283

Malicious code in javascript-magnetar-epimetheus-figures npm...

EUVD-2025-179815

Malicious code in centaurus-superagent-spinner-leda npm...

EUVD-2025-177677

Malicious code in nebula-gulp-bootes-kastra npm...

EUVD-2025-177415

Malicious code in orbit-luna-indus-xanthus npm...

Malicious code in astrochemistry-ionosphere-gravitationalwave-joviology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2119ba76eecde671765855d9947d057698ac00abf631f90c033888f31387b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179309

Malicious code in development-child-process-npm-socketio npm...

EUVD-2025-176616

Malicious code in rocket-got-heka-json npm...

EUVD-2025-175510

Malicious code in xenobiology-materialize-epimetheus-atlas npm...

EUVD-2025-180057

Malicious code in biomimicry-epimetheus-thermochronology-native npm...

Malicious code in hawkingradiation-aether-mesosphere-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b33677574330eb0f97322854d638a9210badd223d764bd7216dd99dbd4dd9d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-pavo-asthenosphere-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c245ebc6d662cd2d791c2a665a08b64c0ac325a3faea4ed570146f511d921147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-scorpius-sirius-parsec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945110d04861c7ba28d752135fc122c0ded21115150e551cf17097d9fdfb3eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178447

Malicious code in import-float-omega-user-eta npm...

Malicious code in stub-emulate-decompress-view-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3014404892613825d603f59e7f5acebc98b397d1e96068233852a6fa05f78311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177702

Malicious code in native-galaxy-antares-global npm...

EUVD-2025-178952

Malicious code in express-superflare-antares-loopback npm...

EUVD-2025-176571

Malicious code in sadr-janus-apex-acamar npm...

Malicious code in cosmiconfig-deimos-kaus-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b417397ddce4e37930565b0788e7a53a679b19a15884a94a966067146ae2b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176227

Malicious code in standard-kuiperbelt-neuromorphic-sedimentology npm...

Malicious code in neptune-barnard-mdx-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7c0e0acd449d91091dc3badd8761736dd2387ceacb715698941f9b53f6e56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...