EUVD-2025-177682

Malicious code in nebula-delphinus-planckscale-juno npm...

EUVD-2025-177455

Malicious code in on-planckscale-sequelize-comet npm...

EUVD-2025-177321

Malicious code in parcel-planckscale-puppeteer-version npm...

EUVD-2025-177145

Malicious code in planckscale-lynx-global-transform npm...

EUVD-2025-177143

Malicious code in planckscale-webpack-json-neptunology npm...

EUVD-2025-176857

Malicious code in quark-dotenv-safe-run-script-planckscale npm...

EUVD-2025-177889

Malicious code in mesosphere-planckscale-quark-promise npm...

EUVD-2025-179003

Malicious code in eventhoriz-event-planckscale-sirius npm...

EUVD-2025-178967

Malicious code in exosphere-galaxy-planckscale-umbra npm...

EUVD-2025-180416

Malicious code in antares-planckscale-helmet-module npm...

EUVD-2025-179520

Malicious code in cosmos-public-warp-planckscale npm...

EUVD-2025-175757

Malicious code in ursa-testcafe-innercore-planckscale npm...

EUVD-2025-180292

Malicious code in astrochemistry-planckscale-levels-singularitarianism npm...

EUVD-2025-175696

Malicious code in void-grus-superagent-planckscale npm...

EUVD-2025-177028

Malicious code in procyon-planckscale-steganography-procyon npm...

Malicious code in quark-dotenv-safe-run-script-planckscale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a6e17931e4aaa6fd168c9dd241a0af9cc5a149837770053fa39c03d71da231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177146

Malicious code in planckscale-augmentedreality-relay-planckscale npm...

EUVD-2025-178646

Malicious code in gridsome-planckscale-primatology-speleology npm...

EUVD-2025-176759

Malicious code in redshift-sagitta-geodynamo-planckscale npm...

Malicious code in antares-planckscale-helmet-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f72530dd247b457218e0e4f8916ac3dc415a8a2eab4401eb9bd37f23deb50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...