EUVD-2025-116442

Malicious code in atlas-terser-uglify-js-solis npm...

EUVD-2025-124340

Malicious code in nodemon-geckodriver-mongodb-uglify-js npm...

EUVD-2025-124005

Malicious code in orbit-uglify-js-jsonp-jekyll npm...

EUVD-2025-113286

Malicious code in ganymede-uglify-js-quark-dotenv npm...

MAL-2025-139444 Malicious code in antares-uglify-js-child-process-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101a83ce1b47d6ca195fd753246395dd6d373fd39ac9b2d8551b942b35b0297f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148880 Malicious code in uglify-js-quito-ursa-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaadc495679e60a19ec8445196bd4b7acb163dfea8b86c1a624c45ecead0fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143249 Malicious code in helmet-dactyl-flare-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bd1c045b58ad64b757331e6f73aabe93eb2e88d53c053b83f4c13383b3f05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122931

Malicious code in quito-eris-markdown-pdf-uglify-js npm...

EUVD-2025-124900

Malicious code in miranda-adonis-uglify-js-gemini npm...

EUVD-2025-120185

Malicious code in xo-despina-uglify-js-neptune npm...

EUVD-2025-116068

Malicious code in blaze-uglify-js-schema-subscription npm...

EUVD-2025-121058

Malicious code in uglify-js-dagda-await-parcel npm...

EUVD-2025-121061

Malicious code in uglify-js-bunyan-solis-neptune npm...

MAL-2025-148213 Malicious code in spinner-uglify-js-sequelize-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec3d26ff88984e14fb77619434a0b3aa7a4dbbd8742914e7a787d85979a1bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147033 Malicious code in rate-limiter-carina-despina-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d89afb49e1baf7114e84e9d0a8e776e8bd8a7494a4fcaa12145552f4ec4505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147718 Malicious code in scorpius-uglify-js-grunt-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7bf0478efc3b2a9cce6d79cf93e4ccee6ad6fb3c74baa90e251c8477bf18ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144813 Malicious code in meissa-loop-uglify-js-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc70419186bba0567af101a8404bb7c268c8f934572df8d12845a5ebc1301ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141298 Malicious code in csrf-uglify-js-library-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 730441ab41ce6ed25d199d9cf8667d5b13854fe7ba17aff009f8dd4285a71b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121046

Malicious code in uglify-js-schema-spica-arcturus npm...

Malicious code in tethys-uglify-js-optimize-css-assets-webpack-plugin-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd8cc6fd533950ef5b378f16b40b3c8fb9577c5a2423c4c92ab9c4bc23264c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...