EUVD-2025-116874

Malicious code in aether-cli-ariel-spawn npm...

EUVD-2025-121390

Malicious code in terser-spawn-pulsar-mdx npm...

EUVD-2025-123267

Malicious code in promise-ursa-testcafe-spawn npm...

EUVD-2025-120460

Malicious code in wezen-spawn-oberon-zenith npm...

EUVD-2025-111690

Malicious code in link-server-bootes-spawn npm...

Malicious code in upgrade-spawn-server-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6ae84aa5b7fe85307aa839241cc7ad1bc03413134bad3133d229dd5cb63412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122831

Malicious code in readable-spawn-miranda-husky npm...

EUVD-2025-111854

Malicious code in leda-capella-celeste-spawn npm...

Malicious code in ursa-spawn-writable-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98529c833cbb87e017a27e085a759a2b5c2daa8f6c81183a5d835f87821f4d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mongodb-spawn-ursa-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aac006721f2dd7978db07e64591af28893d16f07f61a47b2d7eac7fb0fed7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123819

Malicious code in perseus-ora-spawn-uglify-js npm...

EUVD-2025-124122

Malicious code in odin-mira-spawn-protractor npm...

EUVD-2025-122109

Malicious code in selenium-spawn-graphql-scripts npm...

MAL-2025-147814 Malicious code in selenium-spawn-graphql-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bb56bc9a2d81ce14a1bcff9a5dbebd2ee2ca22986cf4b6b12e88a5f9903b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124564

Malicious code in neptune-dotenv-safe-antares-spawn npm...

EUVD-2025-114130

Malicious code in element-ui-proxima-sync-spawn npm...

Malicious code in quark-aquarius-eslint-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef150bf2f6492d4b3a11aa781ebcc8b2feb63ab32cb4e23d322a78ac538fc77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121838

Malicious code in solis-spawn-vuetify-triton npm...

EUVD-2025-116145

Malicious code in bellatrix-spawn-iota-convict npm...

MAL-2025-145799 Malicious code in odin-mira-spawn-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aa37a11a06e592a83031a43a7cd565dfb52011bdb1eddb5c685681580c515f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...