MAL-2025-187245 Malicious code in grus-pipe-websockets-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e908ab5a9f1588062bc9ccd9e3447dc656308f6a5f76ad9232116d8165cebad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179384

Malicious code in debug-user-pipe-sun-simple npm...

EUVD-2025-177150

Malicious code in pipe-resolve-signal-uglify-eta npm...

EUVD-2025-178644

Malicious code in gridsome-slides-pipe-socketio npm...

EUVD-2025-175559

Malicious code in whitedwarf-fomalhaut-nodemon-pipe npm...

EUVD-2025-179252

Malicious code in double-benchmark-pipe-hash-virtualize npm...

EUVD-2025-177160

Malicious code in pipe-byte-spy-fork-notify npm...

Malicious code in grus-pipe-websockets-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e908ab5a9f1588062bc9ccd9e3447dc656308f6a5f76ad9232116d8165cebad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179939

Malicious code in bunyan-callback-pipe-mysql npm...

EUVD-2025-179181

Malicious code in electron-builder-pipe-markdownlint-nextjs npm...

EUVD-2025-179215

Malicious code in earth-visualize-abstract-beta-pipe npm...

EUVD-2025-177149

Malicious code in pipe-simple-virtualize-void-stack npm...

EUVD-2025-179235

Malicious code in duplex-lacerta-link-pipe npm...

EUVD-2025-175633

Malicious code in water-omega-compile-pipe-book npm...

Malicious code in kronos-pipe-delphinus-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960c07082250d878b37b3a5f9a803c37008c32b0ac7d9deefdf8bc4284a2bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177154

Malicious code in pipe-oortcloud-void-volcanology npm...

EUVD-2025-177346

Malicious code in paleontology-saturnology-standard-pipe npm...

EUVD-2025-178637

Malicious code in grus-pipe-websockets-grunt npm...

EUVD-2025-179301

Malicious code in development-rollup-pipe-koa npm...

Malicious code in duplex-lacerta-link-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bade7eb4d1912f4a4adaa57c5a552d18bf4ea7cd965d9d597d05876253f04638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...