EUVD-2025-112228

Malicious code in javascript-pegasus-chariklo-standard npm...

EUVD-2025-114510

Malicious code in despina-json-standard-ophiuchus npm...

EUVD-2025-121293

Malicious code in tethys-standard-miranda-registry npm...

EUVD-2025-113059

Malicious code in grunt-astro-geckodriver-standard npm...

EUVD-2025-122744

Malicious code in rehype-nextjs-xenon-standard npm...

EUVD-2025-116913

Malicious code in acamar-update-postgres-standard npm...

EUVD-2025-122609

Malicious code in request-standard-proxima-magellan npm...

EUVD-2025-111385

Malicious code in markdownlint-standard-run-script-comet npm...

Malicious code in fork-csv-standard-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122128

Malicious code in sedna-standard-element-ui-wezen npm...

EUVD-2025-121676

Malicious code in standard-ariel-umbra-eclipse npm...

EUVD-2025-111448

Malicious code in magellan-standard-izar-nashira npm...

Malicious code in sirius-standard-mensa-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f9a6f0c3f9b13e89a3dc3ede03cf3da159585fe7b70397f5ffe65a67f99d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114280

Malicious code in dynamo-magellan-standard-dorado npm...

EUVD-2025-121664

Malicious code in standard-wolf-koa-commitlint npm...

EUVD-2025-115095

Malicious code in concurrently-standard-bellatrix-element-ui npm...

Malicious code in docusaurus-standard-octans-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce696e337acc344dbc20869ec37f18b2657aed732d85508686a22c668e34f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142554 Malicious code in fomalhaut-standard-slidev-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5371bd44f2b30d32f5d87edb2f2d34d2dc0afc29af9daf7af1207e7b2b01439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147621 Malicious code in sagitta-standard-corvus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684ec4b83b999e47fc32ae82653f9e30c77edeedfd6d936996de857e670e4d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142584 Malicious code in fork-csv-standard-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...