EUVD-2025-175404

Malicious code in zephyr-yakutsk-update-fornax npm...

EUVD-2025-179869

Malicious code in cassini-html-webpack-plugin-loglevel-jest npm...

Malicious code in convict-ultra-paleoceanography-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2845167a2257ec7f82721ef915aacbaf01c5ba75ccb341823c0098c0746549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176661

Malicious code in rest-oortcloud-interstellarmedium-yaml npm...

EUVD-2025-176533

Malicious code in sandbox-quick-hash-psi-throw npm...

EUVD-2025-178496

Malicious code in hugo-nashira-boson-passport npm...

EUVD-2025-180148

Malicious code in bad-info-encrypt-boolean-simple npm...

EUVD-2025-175909

Malicious code in transform-galaxy-writable-slides npm...

EUVD-2025-178068

Malicious code in lint-staged-javascript-jwt-zooarchaeology npm...

EUVD-2025-178301

Malicious code in janus-remark-thuban-sails npm...

EUVD-2025-178314

Malicious code in janus-chai-umbriel-install npm...

EUVD-2025-177929

Malicious code in mdx-hyperion-taurus-antimatter npm...

EUVD-2025-177032

Malicious code in procyon-futurology-concurrently-sqlite npm...

EUVD-2025-178478

Malicious code in hydra-regulus-wavefunction-spectron npm...

Malicious code in meissa-pavo-asthenosphere-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c245ebc6d662cd2d791c2a665a08b64c0ac325a3faea4ed570146f511d921147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179646

Malicious code in command-react-bootstrap-neuromorphic-magellan npm...

Malicious code in css-minimizer-webpack-plugin-hugo-gemini-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1059a1806dfaab5b5cdffa3384aac345169ab11a207e01e109d568b24c0cb582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176703

Malicious code in remark-deneb-radiant-zenobia npm...

EUVD-2025-179862

Malicious code in castor-callisto-miranda-quasar npm...

Malicious code in testcafe-titan-fornax-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505ab67a6297012e58bbbca384b01496596446cd811f997a2a86a2baf414a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...