EUVD-2025-113851

Malicious code in europa-child-process-link-reveal-md npm...

EUVD-2025-114609

Malicious code in deimos-lint-staged-child-process-sedna npm...

EUVD-2025-115354

Malicious code in child-process-miranda-enif-nightwatch npm...

EUVD-2025-115174

Malicious code in commitizen-karma-markdown-child-process npm...

EUVD-2025-123348

Malicious code in process-writable-gacrux-semantic-ui npm...

EUVD-2025-112396

Malicious code in iota-cross-env-socketio-child-process npm...

EUVD-2025-115799

Malicious code in callback-process-upgrade-auth npm...

EUVD-2025-122739

Malicious code in rehype-run-script-soap-process npm...

EUVD-2025-123370

Malicious code in process-hapi-luna-perseus npm...

EUVD-2025-112774

Malicious code in hexo-child-process-chromedriver-jupiter npm...

EUVD-2025-115358

Malicious code in child-process-init-winston-frontend npm...

EUVD-2025-121118

Malicious code in triton-child-process-apollo-loop npm...

EUVD-2025-115411

Malicious code in chariklo-gulp-sync-child-process npm...

EUVD-2025-121435

Malicious code in telesto-enceladus-process-json npm...

EUVD-2025-124162

Malicious code in oberon-xenos-process-spawn npm...

EUVD-2025-121974

Malicious code in sirius-fornax-process-typeorm npm...

EUVD-2025-115359

Malicious code in child-process-graphql-unuk-bootstrap npm...

MAL-2025-148874 Malicious code in uglify-js-hexo-zenobia-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934967d7940b8009db69a6f57f4813c107293a76d651412f11a90960aed262c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111942

Malicious code in kinetic-exec-spectron-webdriver-child-process npm...

MAL-2025-146311 Malicious code in pm2-run-script-eslint-plugin-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...