EUVD-2025-179301

Malicious code in development-rollup-pipe-koa npm...

Malicious code in kronos-pipe-delphinus-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960c07082250d878b37b3a5f9a803c37008c32b0ac7d9deefdf8bc4284a2bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178379

Malicious code in integer-pipe-beta-orchestrate-simulate npm...

EUVD-2025-179765

Malicious code in changelog-tachyon-writable-pipe npm...

EUVD-2025-177151

Malicious code in pipe-pino-pretty-toml-meteor npm...

EUVD-2025-177160

Malicious code in pipe-byte-spy-fork-notify npm...

EUVD-2025-176747

Malicious code in registry-pipe-version-chariklo npm...

EUVD-2025-178985

Malicious code in execute-long-pipe-file-encode npm...

EUVD-2025-177156

Malicious code in pipe-got-filament-xenon npm...

EUVD-2025-177148

Malicious code in pipe-virgo-perseus-auth npm...

EUVD-2025-178173

Malicious code in kronos-pipe-delphinus-centauri npm...

EUVD-2025-175660

Malicious code in warn-sigma-cat-interpret-pipe npm...

EUVD-2025-180453

Malicious code in alpha-view-grep-abstract-pipe npm...

Malicious code in water-omega-compile-pipe-book (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c384897424d689290428902abecc2d8b7ec9bf3b44809f6125a0e31960c0223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178644

Malicious code in gridsome-slides-pipe-socketio npm...

EUVD-2025-179555

Malicious code in cosmiconfig-biosignature-vulcan-pipe npm...

MAL-2025-186630 Malicious code in double-benchmark-pipe-hash-virtualize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693bc7ca615b1cd5a5525161fc2c67df2038089b984d721e39eaf4b39dc51b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179215

Malicious code in earth-visualize-abstract-beta-pipe npm...

MAL-2025-187677 Malicious code in kernel-promise-proxy-xml-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcf722d296a805c892de52ff3cd2ad37ac131c515bfb952e27dae7d017d108d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in koa-pipe-dorado-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5757fe0f704af36026b30b821eb55e1852c529acd48a1a22c9417e571e4f8ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...