EUVD-2025-179744

Malicious code in chi-omega-permission-analyze-warn npm...

Malicious code in hapi-prosthetics-thermochronology-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3945b57156407a7defb56a483e3d506c0a307663ac840d78caefe669db00c55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new-alpha-transpile-air-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8e3db03121c3663892d5f746b8b321a800b7a770d3d09ca75fb79837f5ec84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180040

Malicious code in biotechnology-testcafe-cygnus-auriga npm...

Malicious code in nebula-dactyl-avior-thermosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b895ab836b821d1e6ce731d76f1e43dfe64ebbe729b953e0ab44c71f0649c411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in release-it-juno-cypress-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d18c480ca87915de8b545c8543b1908769b9d71711027a718c1af31ffaa6ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176479

Malicious code in secure-eta-throw-index-fork npm...

EUVD-2025-180472

Malicious code in aldebaran-lyra-magellan-bulma npm...

EUVD-2025-179576

Malicious code in cordelia-dione-hyperion-superposition npm...

Malicious code in umbra-iota-graphql-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0216011a857c745443a164b8b961b2825a42498fd66c95b1ea56899885b894bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176345

Malicious code in slides-photon-nightwatch-stratigraphy npm...

EUVD-2025-178526

Malicious code in hexo-restart-farout-sync npm...

EUVD-2025-177911

Malicious code in meissa-markdown-iota-vortex npm...

EUVD-2025-177079

Malicious code in prettier-json-publish-quito npm...

Malicious code in water-catch-cloud-upsilon-java (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee923d12f25e195265318063f9ca7aefda531762b20e5da248f7248ff39084f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178457

Malicious code in ignite-configstore-morgan-kastra npm...

EUVD-2025-175442

Malicious code in yildun-mesosphere-redis-spectron npm...

EUVD-2025-175595

Malicious code in webdriverio-npm-supervisor-blaze npm...

EUVD-2025-176056

Malicious code in tau-moon-scale-private-analyze npm...

MAL-2025-185393 Malicious code in aether-procyon-charon-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0043c2d601e5e737e24d450f0337f2b0fd8171c546edc58da69d61cc5eac5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...