MAL-2025-192267 Malicious code in elf-stats-snowdusted-lantern-234 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e99540b0f05f5a187e448be6d70c67d6915e7ae75857be07c50497fa5108e46 The package elf-stats-snowdusted-lantern-234 was found to contain malicious code...

EUVD-2025-200864

Malicious code in elf-stats-merry-sparkler-742 npm...

Malicious code in revit-to-ifc-scheduler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27f38ca3d7137e9a86fceda4b0315a4cd618118bcbcbc1b17aec59d089d66e7 The package revit-to-ifc-scheduler was found to contain malicious code...

Malicious code in nbitcoin.unified (NuGet)

--- -= Per source details. Do not edit below this line.=-...

EUVD-2025-199109

Malicious code in @oku-ui/slot npm...

Malicious code in @relyt/claude-context-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c316b01a92bfd324ed27916a84ad109a9a198650509ea633aaa7ab97e5afcf9 The package @relyt/claude-context-core was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-197824

Malicious code in node-calculator-ecec npm...

EUVD-2025-197822

Malicious code in node-calculator-feea npm...

Malicious code in node-calculator-e0b2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba31a08143476ba0a942f7ec99141d6f27fa71a15d43c886d14f1c1fcff6c642 The package node-calculator-e0b2 was found to contain malicious code...

EUVD-2025-176583

Malicious code in run-script-sagitta-pulsar-alphard npm...

EUVD-2025-179964

Malicious code in browserify-seismology-vega-quito npm...

EUVD-2025-178743

Malicious code in gemini-hydrogeology-panspermia-standard npm...

Malicious code in halley-pm2-semantic-ui-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207baa0abd8ece63fe60c3b6ed72245a1fbd0ab7acbb419f0f280f5e15470fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177134

Malicious code in playwright-asthenosphere-norma-cassini npm...

EUVD-2025-176467

Malicious code in sedimentology-ablation-meteor-xml npm...

EUVD-2025-177017

Malicious code in promise-hawkingradiation-paleoclimatology-prompts npm...

Malicious code in venus-phoebe-heliophysics-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c557360705a7b782a60c0b57663064bd571c2258f3504b22e00fdd91e865c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176862

Malicious code in quantumfoam-wavefunction-lacerta-singularity npm...

EUVD-2025-177568

Malicious code in node-sass-blitz-paleobotany-decoherence npm...

EUVD-2025-178888

Malicious code in flare-backend-jsonp-orogeny npm...