EUVD-2025-121570

Malicious code in subscription-fetch-orbit-hermes npm...

EUVD-2025-121556

Malicious code in subscription-zephyr-exec-pegasus npm...

EUVD-2025-115443

Malicious code in changelog-concurrently-subscription-middleware npm...

EUVD-2025-114966

Malicious code in cors-webdriver-mocha-perseus-subscription npm...

Malicious code in gemini-wolf-subscription-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac34b37db8f5230563ed1d7c9aca5ba4992c6274148ebc27c70174dcc389fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114512

Malicious code in despina-galaxy-auth-subscription npm...

EUVD-2025-122602

Malicious code in resolvers-cygnus-subscription-event npm...

EUVD-2025-112450

Malicious code in inquirer-subscription-atlas-nestjs npm...

EUVD-2025-121071

Malicious code in typeorm-subscription-perseus-acamar npm...

EUVD-2025-121218

Malicious code in toml-flare-shelljs-subscription npm...

Malicious code in subscription-xml-jasmine-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eabecc43d01c8587b8f2f53eb45388a9476cf274b7a7c45c565f45dddd21bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114458

Malicious code in dione-subscription-winston-helios npm...

EUVD-2025-111799

Malicious code in less-loader-centauri-subscription-config npm...

EUVD-2025-114675

Malicious code in cz-conventional-changelog-subscription-loopback-titan npm...

EUVD-2025-121981

Malicious code in sirius-cressida-gulp-subscription npm...

Malicious code in capella-hexo-subscription-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2105b8bd28c6efe0d62e14f7c0a60d2d3e0e8df12dba421dfdcfa60299bea723 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-subscription-bootes-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ba89f2afe2abd83731c67d220a62e287593d581993edd712cd5d34c8dea79d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121557

Malicious code in subscription-xml-jasmine-apollo npm...

EUVD-2025-114726

Malicious code in cygnus-subscription-loglevel-castor npm...

EUVD-2025-121376

Malicious code in terser-webpack-plugin-foundation-less-subscription npm...