EUVD-2025-123128

Malicious code in publish-materialize-spawn-quark npm...

Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114417

Malicious code in dorado-local-dotenv-safe-spawn npm...

EUVD-2025-121831

Malicious code in spawn-chai-ursa-eslint npm...

EUVD-2025-115755

Malicious code in callisto-spawn-parcel-jwt npm...

EUVD-2025-122192

Malicious code in scripts-eridanus-duplex-spawn npm...

EUVD-2025-123949

Malicious code in parcel-spawn-dotenv-parse-variables-ultra npm...

EUVD-2025-115732

Malicious code in canopus-spawn-quito-cassini npm...

EUVD-2025-115899

Malicious code in bulma-blaze-europa-spawn npm...

EUVD-2025-116506

Malicious code in ariel-spawn-commitlint-config-angular-cressida npm...

EUVD-2025-121830

Malicious code in spawn-dotenv-dactyl-sirius npm...

EUVD-2025-121947

Malicious code in sirius-spawn-chromedriver-ini npm...

EUVD-2025-116528

Malicious code in arcturus-nightwatch-spawn-perseus npm...

EUVD-2025-113848

Malicious code in europa-cors-cressida-spawn npm...

Malicious code in antares-sagitta-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd83427e56df88a4c28b00a435090b1a952c4b1b7a52f9c58f18630af7a3621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111304

Malicious code in meissa-levels-telesto-spawn npm...

EUVD-2025-114489

Malicious code in development-exec-spawn-perseus npm...

MAL-2025-141774 Malicious code in dotenv-safe-quito-sagitta-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bd17f282b80e518fd36af5bd8237ddb4c4be6a734607ebdcbbb5d20ec0adee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143284 Malicious code in hercules-ganymede-geckodriver-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e914d6e241186d4d4fffda8309b72549ac5b2e3b99f0988811112760f04dc348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144120 Malicious code in karma-spawn-webpack-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ad02d4f568f1f8a2b8334848d681a29dba0cdb833d11bd39f564c54fbe6bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...