EUVD-2025-121743

Malicious code in spica-terser-rimraf-cypress npm...

EUVD-2025-115992

Malicious code in bootstrap-janus-spica-docusaurus npm...

Malicious code in spica-slidev-ultra-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8279bbd45a36576c365070195f23b84851c549e19d14de6869131e7ad0555cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-cypress-barnard-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6102adc00966ba285ca48a5b0c9ef6bedbd9b1c15e55c5c56f7a6b132206d191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141650 Malicious code in dione-spica-node-sass-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3914e11caf443d84492b59f56eb90f24c3ae39be33691d79c7ce9ecf0555ad0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148164 Malicious code in spica-leda-mongodb-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdbe5ec481357f98d1df3769ba55b71340587a839440bd8eb579dcbdf91f8296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144196 Malicious code in koa-module-bootstrap-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a4cb222471bc51975749e78a4951f374ebdaaf33f053ab57fbcd73c4c00e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112100

Malicious code in jsonp-winston-rollup-plugin-spica npm...

EUVD-2025-113806

Malicious code in event-atlas-spica-perseus npm...

Malicious code in spica-spinner-rimraf-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d87ec4e5f35f7aac34b2013148340f8da18a20c969c2efad234a7f9588de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147172 Malicious code in rehype-hermes-spica-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e1ab807813a01c2201c44d4da4a0a9147d82decf9479bff0a1ec89c7c4f72d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139758 Malicious code in auth0-spica-pegasus-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92734995e2e1f92c1b01c8367589e502933e1c64491bb186eba299343b7e1a6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139166 Malicious code in acamar-centauri-izar-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a65dcb67a04bce7b3e85b8d8f65260f06ca2912a4141e61cf48c2c0ad51ea95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121890

Malicious code in soap-spica-gemini-ganymede npm...

EUVD-2025-124132

Malicious code in odin-auth0-spica-markdownlint npm...

MAL-2025-147158 Malicious code in regulus-spica-passport-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a713fe213ed9bf0e8d60873861b986fa6ae9d86a561fc57c525d5bae053da4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148163 Malicious code in spica-json-umbra-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26370197219e71a02c3263fecd9518f07a236ae4b30c53a4642cb3efe432a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140110 Malicious code in bootstrap-janus-spica-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb8df0cbaee112cc2fa35b1b834732111d81069400cdaf6f347189357c40e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141066 Malicious code in configstore-titan-spica-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d4323dfe5c95c01f1b85cbb867e70a807bdfd1bf229b6f11b8e1feca94fae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148158 Malicious code in spica-css-loader-testcafe-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36597f416ec7c190e827446bd569c4ad103c21ea45306506b1fa9419bb85a499 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...