Malicious code in report-good-error-user-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72c93e97ff1357de0fc34488e9d23d0a8ad52b71977cde7e0ac0a8ea5dc92de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-command-warp-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8178667f4cc481bfbb71a61023a72f4c670447ad57a44be40c3aab68de2cac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177930

Malicious code in mdx-development-elara-stratosphere npm...

EUVD-2025-176725

Malicious code in reject-report-water-thread-parse npm...

EUVD-2025-179055

Malicious code in error-root-long-sigma-interpret npm...

EUVD-2025-176777

Malicious code in readable-ophiuchus-markdownlint-colors npm...

EUVD-2025-177271

Malicious code in permission-emulate-cloud-beta-stub npm...

EUVD-2025-176766

Malicious code in redis-epimetheus-jabbah-apex npm...

EUVD-2025-179598

Malicious code in configstore-hermes-development-update npm...

EUVD-2025-176318

Malicious code in soap-odin-config-sails npm...

EUVD-2025-178200

Malicious code in key-kernel-transpile-test-yaml npm...

Malicious code in bunyan-resonance-mensa-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65863ee55838a0a6002f037f8899a14e638e0c1328dce784f74dfa7763be464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177409

Malicious code in orchestrate-grid-dog-air-route npm...

Malicious code in soap-odin-config-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5fb11eb83b83b17a16cb7ae6c6f075d0c88452e612dcd5a1b07ea5cc8eab15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177552

Malicious code in nodejs-sublimation-blueshift-ganymede npm...

EUVD-2025-176417

Malicious code in server-astrometry-ceres-aether npm...

EUVD-2025-175752

Malicious code in user-boolean-info-decode-try npm...

EUVD-2025-176223

Malicious code in standard-thuban-commitlint-config-angular-got npm...

Malicious code in unuk-eris-paleontology-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9329444c67fce09de6e11e7173d8332d45be1f00838ad069f07ca80098b44820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc399df1baa583fe9c5b3c3d19473cebd1498ab6c0de46cdc1ef484368df6c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...