EUVD-2025-179512

Malicious code in cressida-prettier-plugin-markdown-pulsar-stream npm...

MAL-2025-186131 Malicious code in charon-stream-fornax-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4cf23b8f66359c49b529a6491ed2854491a148dd0446c95f06774ae3374ec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177590

Malicious code in nightwatch-procyon-stream-docusaurus npm...

EUVD-2025-177797

Malicious code in miranda-stream-resolvers-convict npm...

EUVD-2025-176189

Malicious code in stream-polaris-json-ursa npm...

EUVD-2025-175721

Malicious code in virgo-arcturus-hydra-stream npm...

EUVD-2025-176188

Malicious code in stream-redis-bellatrix-oscillation npm...

Malicious code in capella-cypress-stream-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c056bd7523c0aa7f57aae01ae6f4600c1fe975aa6052ef4a4e77bee80f16db18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179811

Malicious code in ceres-morgan-stream-singularitarianism npm...

EUVD-2025-179489

Malicious code in cryonics-cypress-stream-lithosphere npm...

EUVD-2025-176191

Malicious code in stream-indus-dendrochronology-run-script npm...

EUVD-2025-179583

Malicious code in convict-spawn-gravitationalwave-stream npm...

EUVD-2025-176525

Malicious code in sanitize-sed-transpile-analyze-sandbox npm...

EUVD-2025-179751

Malicious code in charon-stream-fornax-dotenv npm...

MAL-2025-187225 Malicious code in greatfilter-venus-stream-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2688ecd07f82607da45c4ce63b5e64aab9f8a5cd170454bb2ba16f0dbd1b5a8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189686 Malicious code in stream-polaris-json-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b30bf02b8ab08397ef907793ad4f30bed9073496e1c9a9008a9455e4d891f51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179570

Malicious code in coronalmassejection-express-stream-cryonics npm...

EUVD-2025-176186

Malicious code in stream-yildun-bootes-neutrino npm...

EUVD-2025-178657

Malicious code in greatfilter-venus-stream-halley npm...

MAL-2025-187374 Malicious code in html-webpack-plugin-hologram-stream-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f786614246d2d9d6432c8d36c1015a7c75b9a2b3c99baa78f244a48ad6eb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...