EUVD-2025-120492

Malicious code in weywot-envconfig-meteor-spawn npm...

EUVD-2025-123267

Malicious code in promise-ursa-testcafe-spawn npm...

EUVD-2025-111605

Malicious code in loglevel-indus-spawn-scorpius npm...

EUVD-2025-120460

Malicious code in wezen-spawn-oberon-zenith npm...

EUVD-2025-114130

Malicious code in element-ui-proxima-sync-spawn npm...

EUVD-2025-124564

Malicious code in neptune-dotenv-safe-antares-spawn npm...

EUVD-2025-114084

Malicious code in enceladus-delphinus-spawn-farout npm...

EUVD-2025-115794

Malicious code in callback-restart-spawn-cordelia npm...

EUVD-2025-115218

Malicious code in comet-spawn-oberon-xerxes npm...

EUVD-2025-123819

Malicious code in perseus-ora-spawn-uglify-js npm...

EUVD-2025-121824

Malicious code in spawn-lynx-phenomic-proxima npm...

EUVD-2025-122109

Malicious code in selenium-spawn-graphql-scripts npm...

EUVD-2025-122831

Malicious code in readable-spawn-miranda-husky npm...

Malicious code in bunyan-heka-spawn-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db5614c01d3e27e5f9eea4ed9ba6041855f567bcb63abe84b582e58f8116e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-spawn-writable-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98529c833cbb87e017a27e085a759a2b5c2daa8f6c81183a5d835f87821f4d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121838

Malicious code in solis-spawn-vuetify-triton npm...

EUVD-2025-116053

Malicious code in blitz-leda-meteor-spawn npm...

Malicious code in eris-spawn-lynx-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bca2ce67e69c781a2f7322159d6df5b7e238d726cee97432e040ca27711aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116145

Malicious code in bellatrix-spawn-iota-convict npm...

Malicious code in spawn-figures-async-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56662d4f8f23678a960291b8d19f3aa545e75a2346fcb87bce99a7c591855648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...