EUVD-2025-179486

Malicious code in cryonics-meteor-spawn-halley npm...

EUVD-2025-180064

Malicious code in bioinformatics-achernar-spawn-ganymede npm...

EUVD-2025-176281

Malicious code in spawn-corvus-elektra-iota npm...

EUVD-2025-179741

Malicious code in child-process-blitz-spawn-wasat npm...

EUVD-2025-176955

Malicious code in proxima-spawn-mongoose-brane npm...

EUVD-2025-176279

Malicious code in spawn-miranda-publish-galaxy npm...

MAL-2025-189594 Malicious code in spawn-corvus-elektra-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45a2d1730f87b0c7ad3fc6d33915857fcf5d83c077794051e825175b6ec7b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188296 Malicious code in nightwatch-spawn-leda-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7a1045067738f50113be83874dd4bbe0afc4ee5fc89b8ca6d1f619c3760744 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186475 Malicious code in dagda-spawn-selenium-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577b28c0b18bb61c9dd2efacf6fc2620489f0e87c664c1ceb83b6663cf92d7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-177144 Malicious code in nuyar-da-rofdaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fd259eea2fc0d4274e6b1bea05e716d4acc774317dc35bbb28abfa06c41682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121831

Malicious code in spawn-chai-ursa-eslint npm...

EUVD-2025-112586

Malicious code in ignite-spawn-fornax-umbriel npm...

EUVD-2025-114417

Malicious code in dorado-local-dotenv-safe-spawn npm...

EUVD-2025-123949

Malicious code in parcel-spawn-dotenv-parse-variables-ultra npm...

EUVD-2025-122302

Malicious code in sagitta-spica-acamar-spawn npm...

EUVD-2025-121947

Malicious code in sirius-spawn-chromedriver-ini npm...

EUVD-2025-123701

Malicious code in pino-jwt-spawn-koa npm...

EUVD-2025-112104

Malicious code in jsonp-spawn-cypress-solis npm...

EUVD-2025-121830

Malicious code in spawn-dotenv-dactyl-sirius npm...

Malicious code in odin-mira-spawn-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aa37a11a06e592a83031a43a7cd565dfb52011bdb1eddb5c685681580c515f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...