EUVD-2025-177043

Malicious code in process-daemon-pipe-try-bundle npm...

EUVD-2025-177812

Malicious code in miranda-exec-meissa-terser npm...

EUVD-2025-179563

Malicious code in cors-standard-epimetheus-telesto npm...

EUVD-2025-177617

Malicious code in nextjs-octans-interferometry-fusion npm...

EUVD-2025-178398

Malicious code in innercore-magnetar-xerxes-galaxy npm...

EUVD-2025-176937

Malicious code in public-gacrux-jsonp-sirius npm...

Malicious code in bellatrix-child-process-playwright-geodynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2930943f9773ed3a8e0e8da3151f56613a8f80e333398f6cd40f7d89ac3f9b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178773

Malicious code in ganymede-public-canopus-hydra npm...

MAL-2025-185555 Malicious code in areology-express-kuiperbelt-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 819117857c155692c2a0d41639c5739a13f2e44777fa96cca650d2b82880800a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175679

Malicious code in vuetify-firebase-darkmatter-mineralogy npm...

MAL-2025-187802 Malicious code in lint-antares-luna-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0795e430f9e9aba719b3b6a20ccc0a64f2fccd57f1f4a9b17108037f6fd87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holography-development-nightmare-uranology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a7391f770354c996f96ff917c11fa4926f5234d5852422d6f39e359d9aa7a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177536

Malicious code in notify-link-proxy-double-proxy npm...

EUVD-2025-176601

Malicious code in rollup-plugin-octans-fomalhaut-dependencies npm...

EUVD-2025-177984

Malicious code in magellan-blaze-archaeometry-slides npm...

EUVD-2025-176748

Malicious code in registry-local-biotechnology-sagitta npm...

EUVD-2025-176273

Malicious code in spawn-webpack-nightwatch-slides npm...

EUVD-2025-180096

Malicious code in betelgeuse-antd-magellan-xanthus npm...

EUVD-2025-177256

Malicious code in perseus-hermes-polaris-event npm...

Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab15840c7162a1c78bb10f8ff332b175c7f6472daf912e63eb81d372dc63e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...