EUVD-2025-177084

Malicious code in postgres-promise-transform-farout npm...

EUVD-2025-177009

Malicious code in promise-vortex-technocracy-transform npm...

EUVD-2025-178234

Malicious code in jwt-polaris-accretion-transform npm...

EUVD-2025-176134

Malicious code in superagent-planckscale-prettier-transform npm...

EUVD-2025-178096

Malicious code in lightyear-ichnology-transform-phoebe npm...

Malicious code in transform-semantic-ui-eleventy-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffc4d6e7b72b0aaa2abde280bb586981de8ed65cc2174a163599fb04f6fa777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180231

Malicious code in aurora-transform-protoplanetarydisk-iota npm...

EUVD-2025-179420

Malicious code in dactyl-transform-nightwatch-petrology npm...

Malicious code in graphql-elektra-triton-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32d98eba6cf6a31eff8d8c5f67b0544f7ea9333a54ebdc237767280fcbcf553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175905

Malicious code in transform-version-sequelize-native npm...

MAL-2025-189965 Malicious code in transform-forever-quantum-computing-archaeoastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670dab104ace8220a6a4d15814c89357d5aee51b5d8f63e9d6df78d1ce4735a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175909

Malicious code in transform-galaxy-writable-slides npm...

EUVD-2025-175843

Malicious code in ultra-library-remark-transform npm...

EUVD-2025-175824

Malicious code in umbriel-transform-corvus-request npm...

EUVD-2025-175911

Malicious code in transform-ethology-weywot-style-loader npm...

EUVD-2025-176767

Malicious code in redis-corvus-transform-dependencies npm...

EUVD-2025-179725

Malicious code in cladistics-virgo-transform-query npm...

EUVD-2025-175907

Malicious code in transform-robotics-filament-orbit npm...

EUVD-2025-175913

Malicious code in transform-carpo-charon-hapi npm...

MAL-2025-188730 Malicious code in planckscale-lynx-global-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3a6f504f1e5767dfec6a0695658c17cb181816e481c901e238aa4397ec5924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...