EUVD-2025-179662

Malicious code in comet-perseus-andromeda-terraforming npm...

EUVD-2025-179029

Malicious code in eslint-webdriverio-mutation-sedna npm...

EUVD-2025-176562

Malicious code in sagitta-izar-dagda-nightmare npm...

EUVD-2025-180099

Malicious code in beta-moon-fast-authorize-deploy npm...

EUVD-2025-176747

Malicious code in registry-pipe-version-chariklo npm...

EUVD-2025-176921

Malicious code in publish-postcss-loader-achernar-hermes npm...

EUVD-2025-176555

Malicious code in sagitta-query-brane-parallax npm...

EUVD-2025-178065

Malicious code in lint-staged-superagent-eridanus-bionics npm...

Malicious code in rest-version-library-hadron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e3b01d06955b1393fdf87ea7bfd085c32e43a39e890b503008aefae093db6b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176366

Malicious code in singularity-kuiperbelt-loopback-fermiparadox npm...

Malicious code in geoarchaeology-hologram-xerxes-void (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ed54989fbcb5736d4c2e1a525981e4144b30d7880a6e267468e8ee8ec1c7f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175641

Malicious code in wasat-pulsar-exobiology-link npm...

Malicious code in permission-emulate-cloud-beta-stub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae103f394e7fdbda527da60d6130a3740474fb86bb87ab9c2cc1321b78626994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177759

Malicious code in moon-unix-meta-process-kernel npm...

EUVD-2025-175520

Malicious code in xanthus-fusion-oauth-halley npm...

Malicious code in eventhoriz-futurology-event-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c96777a755a8d3822d329b2a9e85b002427023d67467caa7f45bb2d7653b76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graphql-karma-cluster-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad37a1bc3bc4069bfd4867fc32ef836f405f93fe38cb337fd1e5e922bda5076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176049

Malicious code in taurus-deimos-package-toml npm...

EUVD-2025-178598

Malicious code in hash-table-enum-debug-unix npm...

Malicious code in odin-baryon-primatology-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2818dc552c9cfc1b8556ecb96bea85e101159cbac44081b894801c548d0ed4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...