EUVD-2025-123518

Malicious code in postcss-loader-npm-child-process-gravity npm...

EUVD-2025-121788

Malicious code in spectron-webdriver-process-yonder-antd npm...

Malicious code in castor-xo-process-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f7e9ee758d3225c0ac906b5d2c0af7eafe128a6688181ebd5cc15facb09c278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123372

Malicious code in process-figures-run-script-node-config npm...

EUVD-2025-121871

Malicious code in socketio-geckodriver-child-process-exec npm...

EUVD-2025-121054

Malicious code in uglify-js-hexo-zenobia-child-process npm...

EUVD-2025-122921

Malicious code in quito-phoenix-process-inquirer npm...

EUVD-2025-123268

Malicious code in promise-umbra-achernar-child-process npm...

Malicious code in child-process-foundation-eclipse-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c4f59859c4a243e08dd39070370b2f65a3c8c6d979f8032023e0bd0b311b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114077

Malicious code in enceladus-process-sqlite-google npm...

EUVD-2025-122291

Malicious code in sagitta-xml-child-process-loopback npm...

EUVD-2025-124817

Malicious code in module-cypress-phoebe-process npm...

MAL-2025-139431 Malicious code in antares-phenomic-process-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a73308f60ba615f3627d57d87db5205c9f4eba95159507cd9f0fe02e687f95a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149883 Malicious code in zephyr-child-process-apollo-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cdf2cdaee2edc3bdaa3dafa44c797d167187a3a3f86acedc1d2c42d0b8ced5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141560 Malicious code in deneb-ultra-process-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf421c8337829ccd7752197bb60c5b21fc674b453bfedc4a03db7644b960f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149657 Malicious code in xenon-process-levels-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e2c758d7d5bda40bcd116ee3544ebbbc9fd22d8e381982f8b1e49428309067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143646 Malicious code in inquirer-duplex-process-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915e7cbf95b48a2c8efed1a02fed0f77e49a42ae939fae8791389eff9a7ab0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142237 Malicious code in eslint-plugin-process-sails-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54131fa2d2dcc4b78de6cb5b6d09342e6dc5740aaa9fbbe5e0ec5cac6985a259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142879 Malicious code in geckodriver-process-module-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b003134420a4f6d79fd4f63c839be965746e5cf508de21a4f403624f0104e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149547 Malicious code in wolf-dotenv-safe-init-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f276f80847acdf6e724ff67d80fb8c48fe61319092838a09349c533b099d4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...