EUVD-2025-178905

Malicious code in final-bundle-zero-string-deserialize npm...

EUVD-2025-178354

Malicious code in ionosphere-terraforming-string-exosphere npm...

EUVD-2025-178976

Malicious code in exoplanet-string-bulma-tardigrade npm...

MAL-2025-189800 Malicious code in tachyon-string-version-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0fdfc74478a9afbba79d8616c10a0a83eb890f0f6898259eec91b20c796be2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189692 Malicious code in string-compile-module-benchmark-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a32edf99d2adb837e219033e596267b024daa93bbe2f9e9e2030e20bfffdffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188826 Malicious code in private-easy-string-decrypt-meta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ae8f5ebf1c13bf1a1e8aa5ca2740eee87baa6e70ae9e6675a45d077559c16a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176178

Malicious code in string-eslint-antd-cosmology npm...

EUVD-2025-175695

Malicious code in void-kernel-integer-visualize-string npm...

EUVD-2025-177423

Malicious code in optimize-uglify-cluster-string-refactor npm...

EUVD-2025-179392

Malicious code in data-grep-string-transpile-link npm...

EUVD-2025-176180

Malicious code in string-deneb-string-spectroscopy npm...

EUVD-2025-177049

Malicious code in private-easy-string-decrypt-meta npm...

MAL-2025-186657 Malicious code in dynamo-sirius-changelog-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99724af34264220df5ccb753c1103bd7ff76b4df241a798532e0790d5505f7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176177

Malicious code in string-index-dog-abstract-simple npm...

EUVD-2025-176185

Malicious code in string-avior-heliophysics-tachyon npm...

EUVD-2025-175713

Malicious code in virtualize-kernel-string-cluster-mu npm...

Malicious code in omega-string-view-double-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da844f5894c542a0d1cf7cd454e4368a4f85e5c9fcf2b60c0a06e16e1a40fa0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176181

Malicious code in string-crust-exoplanet-centauri npm...

EUVD-2025-176174

Malicious code in string-version-oauth-epimetheus npm...

EUVD-2025-179846

Malicious code in catch-bash-string-long-catch npm...