EUVD-2025-176583

Malicious code in run-script-sagitta-pulsar-alphard npm...

EUVD-2025-176862

Malicious code in quantumfoam-wavefunction-lacerta-singularity npm...

EUVD-2025-179101

Malicious code in epigenetics-kinetic-prompts-taphonomy npm...

EUVD-2025-176815

Malicious code in radiant-toml-primatology-dotenv-safe npm...

Malicious code in venus-phoebe-heliophysics-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c557360705a7b782a60c0b57663064bd571c2258f3504b22e00fdd91e865c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177568

Malicious code in node-sass-blitz-paleobotany-decoherence npm...

EUVD-2025-177017

Malicious code in promise-hawkingradiation-paleoclimatology-prompts npm...

EUVD-2025-177134

Malicious code in playwright-asthenosphere-norma-cassini npm...

EUVD-2025-179964

Malicious code in browserify-seismology-vega-quito npm...

EUVD-2025-178743

Malicious code in gemini-hydrogeology-panspermia-standard npm...

Malicious code in modiov-khan-avcafivaid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9fa94e87d73c216ebfb4394a898a713981b9e7138d7c1a4b1064fb2d46fef12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182420 Malicious code in imodiov-kufni-acumnacffgteafgrdcaavfhaebfac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6e9192a1f7b0759bcb577daacd5a88259a6361350d2d2445cdde6f5fbccee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in one-kat-ibufadaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9712d7d51ace948ada3d80f10205b20611022512eb8e2ebcddad0cf7b5b26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sonic-kos-fusg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a1d1012cace5fee6c9b048af25b1e2f11ef2eb369189e15a1d544eac9ace63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185256 Malicious code in tuis-kjt-garfuafafawkvdyfimas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5008f9506a84ba8196515389256f0b3037df23d0a8564104c84ede534009a80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-133283

Malicious code in teate-thy-sonic-efebec npm...

EUVD-2025-134624

Malicious code in analuba-innu-nii npm...

EUVD-2025-132244

Malicious code in teate-thy-sonic-river npm...

EUVD-2025-139381

Malicious code in nur-zidan-tea npm...

Malicious code in miba-minas-mins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e30f2afbbdc543b1a822babeb49773eb2718210fcf5c04929b40029395a6c6b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...