Malicious code in dagda-technocracy-commitlint-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5d983e33879369dd931cad741e8149906dfd91e5b8a8b102b534b4b2cea15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176369

Malicious code in singularitarianism-prosthetics-wolf-exosphere npm...

EUVD-2025-177995

Malicious code in lynx-supervisor-relay-loop npm...

Malicious code in callback-upgrade-ophiuchus-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a0e7ea27c39c0994bad0e12f99255722091fc3c0df8286c617e33cbe7a8d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180320

Malicious code in array-load-sandbox-code-cache npm...

Malicious code in cypress-procyon-neptune-epigenetics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2913afaa34955cc3427e4afa8d9aa00515de6fd22785137fec6b00482eac91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iota-report-phi-good-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4466f1348183e2632c1a55a4604c3526358dfe8dc19f8b17470ec8d2a5ddf2ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179236

Malicious code in duplex-init-parcel-test npm...

EUVD-2025-177520

Malicious code in npm-global-sublimation-augmentedreality npm...

Malicious code in umbra-farout-barnard-redshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3deb299289ab58a5d665be2d8f00891334e73390e4ea998ace64dc54f4c5613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177975

Malicious code in magellan-vega-phoenix-hydrogeology npm...

EUVD-2025-176037

Malicious code in technosignature-eslint-plugin-deimos-stop npm...

EUVD-2025-179961

Malicious code in buffer-css-loader-draco-sirius npm...

EUVD-2025-175435

Malicious code in yonder-sedna-innercore-slidev npm...

Malicious code in juno-ganymede-inquirer-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463d0aa870f868241b4b5f4ffd22e9771e26f4a29e3ac8258e8c4b564d6c6c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176174

Malicious code in string-version-oauth-epimetheus npm...

EUVD-2025-175565

Malicious code in wezen-halley-less-io npm...

EUVD-2025-177964

Malicious code in mantle-asteroid-charon-quasar npm...

EUVD-2025-175881

Malicious code in tree-notify-report-decrypt-scale npm...

Malicious code in cat-big-code-star-encrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f3f6f9d454212a45cd8e581e11bfd884a5fcbb6280ff321fad59393e2c987a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...