EUVD-2025-178199

Malicious code in key-notify-stack-water-module npm...

Malicious code in wezen-hexo-update-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b835942f6a8543c810550c04c687136135ae9e3c47b61eb95bd234b7c13caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in archaeometry-yaml-phoebe-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880fcbbb3bbcce9c482ea58ee1f84a2ff2286445d9705d51ab580632d70a051c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-nashira-seismology-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727447041b626199e98814dfab93fcda621b58917fdb68844e29b0b7d8e48327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-europa-nextjs-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 723695676a287161e3d27b973e94d01b9c7964555c6b08d4112590252c89e581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subscription-asteroid-paleoanthropology-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 918073041e550b5c69ffe7cd13c869d13b870526af47b743e03a6b1ae9f81efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179950

Malicious code in bulma-equinox-build-nova npm...

EUVD-2025-177551

Malicious code in nodemon-css-loader-husky-parcel npm...

EUVD-2025-176626

Malicious code in rimraf-webdriver-manager-impulse-dione npm...

EUVD-2025-178234

Malicious code in jwt-polaris-accretion-transform npm...

EUVD-2025-177530

Malicious code in nova-chakra-ui-css-loader-eris npm...

EUVD-2025-176118

Malicious code in superflare-tectonophysics-less-deimos npm...

EUVD-2025-175929

Malicious code in toml-ethology-cordelia-carpo npm...

Malicious code in pino-pretty-kuiperbelt-vulcan-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d01b3bf19da8542bfc975fdfb7a80d55b99366b0702f190de1439f1a90fa5fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179172

Malicious code in elektra-xml-grus-hugo npm...

EUVD-2025-179311

Malicious code in despina-winston-query-higgs npm...

EUVD-2025-178503

Malicious code in html-webpack-plugin-version-vulcan-rollup npm...

EUVD-2025-179006

Malicious code in event-husky-tachyon-auth0 npm...

EUVD-2025-180184

Malicious code in await-pm2-quito-meteor npm...

Malicious code in webpack-query-thermochronology-antimatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a6ba0afcd681d793424b23a2849d2d1319c11a0069ba3956b955fc994186da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...