MAL-2025-140474 Malicious code in cassini-puppeteer-spica-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49a3c927ec65fd58703092a6e2e828a1b898fb03af1f389b91fdb76efc5d67f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116094

Malicious code in betelgeuse-spica-figures-hapi npm...

EUVD-2025-122764

Malicious code in regulus-spica-passport-exec npm...

EUVD-2025-121758

Malicious code in spica-magellan-css-loader-eslint npm...

EUVD-2025-121755

Malicious code in spica-nextjs-draco-despina npm...

Malicious code in spica-link-iota-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3505a2955823677a1410053b48dbc5822ca4f4edc06b421263f3f15fda0f33b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123881

Malicious code in pegasus-json-spica-start npm...

EUVD-2025-113785

Malicious code in event-spica-gridsome-semantic-release npm...

Malicious code in spica-charon-perseus-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd19137bc29e8d26057720cd37eada1f3debb2ca67b9358bcc23f58791b8160b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115633

Malicious code in cassini-puppeteer-spica-cassini npm...

EUVD-2025-121777

Malicious code in spica-airbnb-elara-solis npm...

EUVD-2025-112235

Malicious code in javascript-dotenv-quasar-spica npm...

EUVD-2025-113203

Malicious code in gemini-perseus-spica-passport npm...

EUVD-2025-120378

Malicious code in wolf-nuxtjs-mira-spica npm...

EUVD-2025-115918

Malicious code in build-non-blocking-tailwindcss-spica npm...

Malicious code in spica-postcss-init-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0dd7516ab206c60ecc4fc90715916d1522813a27c6be01c8e4d65420b4f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radiant-spica-aquarius-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7169f32b6920c67feca4879bb9c15b8431f75f889719ff5864c3908dc64c8ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123429

Malicious code in prettier-plugin-markdown-rocket-jwt-spica npm...

EUVD-2025-121752

Malicious code in spica-postcss-init-auth npm...

Malicious code in spica-apollo-iota-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9419b488c19ab307d7bb586c2e61e93611f22530d984b9211a6dfbe9e169ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...