EUVD-2025-178637

Malicious code in grus-pipe-websockets-grunt npm...

EUVD-2025-177154

Malicious code in pipe-oortcloud-void-volcanology npm...

EUVD-2025-180439

Malicious code in analyze-boolean-pipe-import-epsilon npm...

MAL-2025-189621 Malicious code in speleology-pipe-pino-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc12667834e75d07b49fcd90c909c4159cb87514b0d23ee6ae4ae93afb1756b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121074

Malicious code in typeorm-pipe-dynamo-jwt npm...

EUVD-2025-122343

Malicious code in sagitta-altair-winston-pipe npm...

EUVD-2025-116766

Malicious code in alphard-pipe-hapi-remark npm...

EUVD-2025-112927

Malicious code in hapi-iota-pipe-selenium npm...

EUVD-2025-123656

Malicious code in pipe-phenomic-zenith-dotenv-safe npm...

Malicious code in epimetheus-pipe-janus-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cf70b023c5a2030e7b0b477fe8e7e00b2788618c9cb5e318879b46b9e30063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140542 Malicious code in centaurus-despina-pipe-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7412f390ed0a56288b73f2f3b4c82e88af73120b691359e975a6aca3e0cacf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112306

Malicious code in janus-enceladus-pipe-carina npm...

EUVD-2025-114007

Malicious code in epimetheus-pipe-janus-cli npm...

EUVD-2025-113379

Malicious code in fusion-ganymede-pipe-package npm...

Malicious code in upgrade-hydra-pipe-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e18cb32f9743ad0393c9b37380bc6d659a698bcfa50db24fb1611874cfe712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123716

Malicious code in phoenix-pipe-subscription-helios npm...

Malicious code in meissa-pipe-dependencies-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d83ca74cc580cbd8d76790318201e0cdecf41986d97cbcec98d9b091d4ea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-iota-pipe-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6704db381e370c13375724452840d7934ccdd42b0c11abe9e9c9e1356ac4777c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123652

Malicious code in pipe-release-it-hermes-rollup-plugin npm...

EUVD-2025-121244

Malicious code in titan-mui-procyon-pipe npm...