Malicious code in less-mineralogy-airbnb-tardigrade (npm)

Source: amazon-inspector e1e150649f9701fa8a91531cb8cfe5a7a8a65c99dfd46ea28f5561aad1fc5b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kastra-pm2-tardigrade-paleomagnetism (npm)

The package kastra-pm2-tardigrade-paleomagnetism was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in kastra-neutronstar-tardigrade-perseus (npm)

The package kastra-neutronstar-tardigrade-perseus was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in janus-enif-tardigrade-test (npm)

Source: amazon-inspector ff78e85a54ccb460ad2b990e4270daacdfb20d0bd654fb34f0cd1caf7ff9a785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hapi-orogeny-tardigrade-rate-limiter (npm)

Source: amazon-inspector 87cca49ed0443fcba435da5ad6b7b18a4587c6827a86961106867224991472ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in exoplanet-string-bulma-tardigrade (npm)

Source: amazon-inspector 3db6d30965032b31e8676816820d7bbeb491cca49937b3702c7436d896a3b8df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in eslint-tardigrade-gammarayburst-cryonics (npm)

Source: amazon-inspector 6f6ba0986e5b3fa90399d98555fce56050736ff52b31ceb2a66250e086fda217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cryonics-magellan-bionics-tardigrade (npm)

Source: amazon-inspector f35509feb00c10d70419411c894a45931a339c14f56fd0b061b3718d5ae85a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cladistics-tardigrade-blueshift-primatology (npm)

The package cladistics-tardigrade-blueshift-primatology was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in chai-node-sass-biosignature-tardigrade (npm)

Source: amazon-inspector 57811ff3009936e39a8aa148ef288a54279dba83243c7e753f89627af5afdb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in archaeogenetics-tardigrade-filament-boson (npm)

Source: amazon-inspector a9224028552e3b7dfa507b6d9c04414e4fc7c9633163fa4ca6c51bf465fb5ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in apollo-areology-tardigrade-tailwindcss (npm)

Source: amazon-inspector ca645c1e73422a65c8b79fd047b60d4ad87534ee6dd87cc564d09d207e3ff405 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-176066

Malicious code in tardigrade-indus-baryon-axios npm...

EUVD-2025-178976

Malicious code in exoplanet-string-bulma-tardigrade npm...

EUVD-2025-176063

Malicious code in tardigrade-perseus-scripts-csrf npm...

EUVD-2025-176062

Malicious code in tardigrade-virgo-hologram-yaml npm...

EUVD-2025-178758

Malicious code in gatsby-tardigrade-hyperion-got npm...

EUVD-2025-179487

Malicious code in cryonics-magellan-bionics-tardigrade npm...

EUVD-2025-176232

Malicious code in standard-apollo-tardigrade-perseus npm...

Malicious code in hapi-orogeny-tardigrade-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cca49ed0443fcba435da5ad6b7b18a4587c6827a86961106867224991472ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...