EUVD-2025-177043

Malicious code in process-daemon-pipe-try-bundle npm...

EUVD-2025-176122

Malicious code in supercluster-webdriver-manager-pipe-alphard npm...

EUVD-2025-177153

Malicious code in pipe-orogeny-await-kaus npm...

EUVD-2025-178205

Malicious code in kernel-promise-proxy-xml-pipe npm...

EUVD-2025-177162

Malicious code in pipe-astrophysics-astroinformatics-callisto npm...

EUVD-2025-177152

Malicious code in pipe-parallax-build-kinetic npm...

EUVD-2025-179252

Malicious code in double-benchmark-pipe-hash-virtualize npm...

EUVD-2025-178197

Malicious code in key-refactor-finally-optimize-pipe npm...

EUVD-2025-180439

Malicious code in analyze-boolean-pipe-import-epsilon npm...

EUVD-2025-179208

Malicious code in easy-pipe-signal-proxy-uglify npm...

EUVD-2025-175828

Malicious code in umbriel-leda-pipe-process npm...

EUVD-2025-175559

Malicious code in whitedwarf-fomalhaut-nodemon-pipe npm...

Malicious code in duplex-lacerta-link-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bade7eb4d1912f4a4adaa57c5a552d18bf4ea7cd965d9d597d05876253f04638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179181

Malicious code in electron-builder-pipe-markdownlint-nextjs npm...

EUVD-2025-179235

Malicious code in duplex-lacerta-link-pipe npm...

EUVD-2025-177149

Malicious code in pipe-simple-virtualize-void-stack npm...

Malicious code in pipe-auth0-barnard-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b3b68d9a0c694ca31182e0583f4bf4ee987574a2c4a765974633b4f89dc72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179942

Malicious code in bundle-static-pipe-mu-float npm...

MAL-2025-188722 Malicious code in pipe-orogeny-await-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2382b0c000b2e4514194f19d8259b7e578360d10c1531f70c0f8429921ac3b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189621 Malicious code in speleology-pipe-pino-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc12667834e75d07b49fcd90c909c4159cb87514b0d23ee6ae4ae93afb1756b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...