Malicious code in await-spawn-galaxy-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b43b63aa9b116de12f98fe72753cafc805de0801861e451fb794650f62b8952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121773

Malicious code in spica-capella-optimize-css-assets-webpack-plugin-local npm...

EUVD-2025-114459

Malicious code in dione-spica-node-sass-puppeteer npm...

Malicious code in jabbah-spica-corvus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b77122a85467dcbf77034e0ca197862dd07c0ed4a66331a6fb2372a7250c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122899

Malicious code in radiant-spica-aquarius-css-minimizer-webpack-plugin npm...

EUVD-2025-121766

Malicious code in spica-cypress-barnard-bootstrap npm...

EUVD-2025-111777

Malicious code in less-loader-update-spica-mongoose npm...

EUVD-2025-112785

Malicious code in hermes-spica-taurus-json npm...

EUVD-2025-114569

Malicious code in deneb-convict-loopback-spica npm...

EUVD-2025-121768

Malicious code in spica-convict-got-typeorm npm...

EUVD-2025-121274

Malicious code in thuban-less-loader-spica-achernar npm...

EUVD-2025-121757

Malicious code in spica-magellan-sagitta-ceres npm...

EUVD-2025-121747

Malicious code in spica-rocket-css-minimizer-webpack-plugin-flare npm...

EUVD-2025-114198

Malicious code in electron-builder-spica-halley-winston npm...

EUVD-2025-121771

Malicious code in spica-ceres-semantic-release-janus npm...

Malicious code in koa-module-bootstrap-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a4cb222471bc51975749e78a4951f374ebdaaf33f053ab57fbcd73c4c00e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122302

Malicious code in sagitta-spica-acamar-spawn npm...

EUVD-2025-116344

Malicious code in auth0-spica-pegasus-dactyl npm...

MAL-2025-148176 Malicious code in spica-quantum-await-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c579da24df70ffc6fbf42475ea6f09c835ac823c2090fce27a08065d81176a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144669 Malicious code in magellan-toml-pyxis-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6dc533b7eafd1a447732d5171a98cc252177054638dda40dfda403bdeecec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...