EUVD-2025-175540

Malicious code in winston-lint-staged-ganymede-parcel npm...

EUVD-2025-177133

Malicious code in playwright-dotenv-parse-variables-parcel-less npm...

EUVD-2025-177324

Malicious code in parcel-non-blocking-bulma-chakra-ui npm...

EUVD-2025-177281

Malicious code in pegasus-parcel-gravity-cassini npm...

EUVD-2025-177321

Malicious code in parcel-planckscale-puppeteer-version npm...

EUVD-2025-179983

Malicious code in boson-apex-parcel-cybernetics npm...

EUVD-2025-178213

Malicious code in karma-spectron-parcel-aether npm...

EUVD-2025-179236

Malicious code in duplex-init-parcel-test npm...

EUVD-2025-179234

Malicious code in duplex-parcel-nodejs-membrane npm...

MAL-2025-188560 Malicious code in parcel-panspermia-commitlint-config-angular-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7ce5ec778c0d8a09caa214fc9ed62c9222306281fcc29ee88e7c4f779e7806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-fusion-parcel-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8896c11499cbc300839106a9d93de9e4a30426aa807e94d84e2508e01be58e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176430

Malicious code in sequelize-ophiuchus-parcel-procyon npm...

EUVD-2025-179857

Malicious code in castor-singularitarianism-parcel-perseus npm...

MAL-2025-189586 Malicious code in solarnebula-parcel-biohacking-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ed3cebc11406d149f99f7b8fed1fc90bbf3c960903007d1a3ee0dc48bedae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177110

Malicious code in polaris-parcel-ora-quasar npm...

EUVD-2025-176516

Malicious code in saturnology-blueshift-parcel-deimos npm...

EUVD-2025-177322

Malicious code in parcel-panspermia-commitlint-config-angular-tectonophysics npm...

EUVD-2025-178628

Malicious code in gulp-parcel-bioinformatics-halley npm...

EUVD-2025-177708

Malicious code in native-blackhole-parcel-node-sass npm...

Malicious code in polaris-parcel-ora-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a6e796dc58fc1cd8ce228f6a9f7265536d1cd77c4ce0a8d3d2704dc4e4ac18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...