Malicious Package

Overview link-uglify-js-fermiparadox-auth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

CLSA-2026-1776904629 TuxCare security update for uglify-js (2 CVEs)

TuxCare rebuilt uglify-js to address 2 CVEs. Fixed in 2.8.29-tuxcare.1...

CLSA-2026-1776904632 TuxCare security update for uglify-js (2 CVEs)

TuxCare rebuilt uglify-js to address 2 CVEs. Fixed in 3.4.10-tuxcare.1...

CLSA-2026-1774225182 TuxCare security update for uglify-js (2 CVEs)

TuxCare rebuilt uglify-js to address 2 CVEs. Fixed in 2.3.6-tuxcare.1...

CLSA-2026-1773274555 TuxCare security update for uglify-js (2 CVEs)

TuxCare rebuilt uglify-js to address 2 CVEs. Fixed in 1.1.1-tuxcare.1...

PT-2026-74551

TuxCare rebuilt uglify-js to address 2 CVEs. Fixed in 3.4.10-tuxcare.1...

PT-2026-74548

TuxCare rebuilt uglify-js to address 2 CVEs. Fixed in 2.8.29-tuxcare.1...

PT-2026-74060

TuxCare rebuilt uglify-js to address 2 CVEs. Fixed in 2.3.6-tuxcare.1...

PT-2026-74059

TuxCare rebuilt uglify-js to address 2 CVEs. Fixed in 1.3.5-tuxcare.1...

PT-2026-73949

TuxCare rebuilt uglify-js to address 2 CVEs. Fixed in 1.1.1-tuxcare.1...

EUVD-2025-176088

Malicious code in sync-uglify-js-rest-superagent npm...

EUVD-2025-175803

Malicious code in unuk-uglify-js-astrochemistry-comet npm...

EUVD-2025-175656

Malicious code in warp-dotenv-safe-andromeda-uglify-js npm...

EUVD-2025-176953

Malicious code in proxima-uglify-js-biomimicry-quasar npm...

EUVD-2025-178243

Malicious code in juno-uglify-js-tethys-thermochronology npm...

EUVD-2025-178083

Malicious code in link-uglify-js-fermiparadox-auth npm...

EUVD-2025-178061

Malicious code in lithosphere-changelog-grunt-uglify-js npm...

EUVD-2025-179539

Malicious code in cosmicweb-miranda-xerxes-uglify-js npm...

EUVD-2025-180060

Malicious code in bioinformatics-proxima-uglify-js-rimraf npm...

Malicious code in unuk-uglify-js-astrochemistry-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57906ac6a4735bb92280c00660dfe0fcb082121021fc0d695fd942e50c6163c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...