EUVD-2025-115348

Malicious code in child-process-zenobia-mocha-despina npm...

EUVD-2025-111491

Malicious code in magellan-blitz-atlas-child-process npm...

EUVD-2025-120650

Malicious code in wasat-andromeda-phoebe-child-process npm...

EUVD-2025-120936

Malicious code in update-child-process-xerxes-postcss npm...

EUVD-2025-122877

Malicious code in rate-limiter-ophiuchus-cluster-child-process npm...

EUVD-2025-123144

Malicious code in publish-child-process-fornax-airbnb npm...

EUVD-2025-123743

Malicious code in phoebe-sagitta-gridsome-child-process npm...

EUVD-2025-112695

Malicious code in husky-fork-child-process-flare npm...

EUVD-2025-115349

Malicious code in child-process-uninstall-mui-dactyl npm...

EUVD-2025-115351

Malicious code in child-process-socketio-envconfig-umbriel npm...

EUVD-2025-124008

Malicious code in orbit-thuban-child-process-writable npm...

EUVD-2025-122335

Malicious code in sagitta-child-process-zenith-fork npm...

EUVD-2025-124323

Malicious code in nodemon-thuban-child-process-element-ui npm...

EUVD-2025-123143

Malicious code in publish-child-process-halley-andromeda npm...

EUVD-2025-123001

Malicious code in quark-child-process-mongodb-phoebe npm...

MAL-2025-144624 Malicious code in magellan-blitz-atlas-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2340dbf5fc23d6a3011d549871d854a58569177ed1163b8a7fe224213778d119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122214

Malicious code in scorpius-europa-nightwatch-child-process npm...

EUVD-2025-116658

Malicious code in antares-uglify-js-child-process-galaxy npm...

MAL-2025-149883 Malicious code in zephyr-child-process-apollo-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cdf2cdaee2edc3bdaa3dafa44c797d167187a3a3f86acedc1d2c42d0b8ced5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-nextjs-sedna-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20611358ebe53864fba342e25d51ab7ae0970d8e843144dbb1ad433758e9a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...