MAL-2025-148874 Malicious code in uglify-js-hexo-zenobia-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934967d7940b8009db69a6f57f4813c107293a76d651412f11a90960aed262c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146007 Malicious code in pavo-process-socketio-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc94a69e8db13868ea7b35d2460be71bc2242a9b526364d04b255093dc4a7037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140747 Malicious code in child-process-framework-metalsmith-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849be0aae93e5cfbd3e6a735ee71094677ea146394d513afeaba71ce013d555d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144171 Malicious code in kinetic-exec-spectron-webdriver-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7effbcd1496d9a2517931b273a2bd6b3fe910ed3cc3d39cb648b766711de01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121788

Malicious code in spectron-webdriver-process-yonder-antd npm...

Malicious code in castor-xo-process-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f7e9ee758d3225c0ac906b5d2c0af7eafe128a6688181ebd5cc15facb09c278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-spinner-node-config-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10975cf9d208a454c4ec8cf4c7efbfe081c6fb8ff9695c78c35d806391226c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-mdx-pyxis-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5d4a569c36cb93cfe22fb3e8dcdf66e0ee3ba72263a1ec085f04238964a5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-foundation-eclipse-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c4f59859c4a243e08dd39070370b2f65a3c8c6d979f8032023e0bd0b311b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122921

Malicious code in quito-phoenix-process-inquirer npm...

EUVD-2025-115282

Malicious code in cluster-geckodriver-child-process-sails npm...

EUVD-2025-112700

Malicious code in husky-child-process-lint-staged-dynamo npm...

EUVD-2025-114985

Malicious code in cors-ganymede-charon-process npm...

Malicious code in process-install-rollup-plugin-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d53156fae37387a3d630d0ef0fa551919d0a384042b09cca6044d0c86ea7788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122335

Malicious code in sagitta-child-process-zenith-fork npm...

Malicious code in zephyr-child-process-apollo-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cdf2cdaee2edc3bdaa3dafa44c797d167187a3a3f86acedc1d2c42d0b8ced5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in child-process-lint-staged-less-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62ba95efd3f3ef97d0e9b721dde58dd83c79c4eac6b6f8b08e9fb792462089a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114481

Malicious code in development-query-pm2-uglify-js npm...

EUVD-2025-123364

Malicious code in process-mysql-cosmiconfig-npm npm...

Malicious code in despina-process-scripts-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bfde1fa601c3eec22c025c031edeb243d99a0f5344dbaa7ec5e5caea3b93b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...