EUVD-2025-179539

Malicious code in cosmicweb-miranda-xerxes-uglify-js npm...

Malicious code in unuk-uglify-js-astrochemistry-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57906ac6a4735bb92280c00660dfe0fcb082121021fc0d695fd942e50c6163c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175803

Malicious code in unuk-uglify-js-astrochemistry-comet npm...

EUVD-2025-176953

Malicious code in proxima-uglify-js-biomimicry-quasar npm...

EUVD-2025-175656

Malicious code in warp-dotenv-safe-andromeda-uglify-js npm...

EUVD-2025-176088

Malicious code in sync-uglify-js-rest-superagent npm...

EUVD-2025-178083

Malicious code in link-uglify-js-fermiparadox-auth npm...

EUVD-2025-180060

Malicious code in bioinformatics-proxima-uglify-js-rimraf npm...

EUVD-2025-178243

Malicious code in juno-uglify-js-tethys-thermochronology npm...

EUVD-2025-178061

Malicious code in lithosphere-changelog-grunt-uglify-js npm...

MAL-2025-187639 Malicious code in juno-uglify-js-tethys-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca3b11671ecb29ff8f1e78656346b4fcd45de13ee2feb8648e6425fdce8d720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124203

Malicious code in nuxtjs-uglify-js-loopback-comet npm...

EUVD-2025-115874

Malicious code in bulma-ultra-meteor-uglify-js npm...

EUVD-2025-124766

Malicious code in mongoose-firebase-local-uglify-js npm...

EUVD-2025-120782

Malicious code in version-uglify-js-draco-dotenv npm...

EUVD-2025-115604

Malicious code in celeste-cli-uglify-js-update npm...

EUVD-2025-121053

Malicious code in uglify-js-nestjs-fornax-husky npm...

EUVD-2025-121045

Malicious code in uglify-js-spectron-colors-server npm...

Malicious code in uglify-js-dagda-await-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243c74042d730e5159f494bcce2577e075e1b9b265b17bf81e37baff39aa8ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124005

Malicious code in orbit-uglify-js-jsonp-jekyll npm...