Malicious code in spawn-wasat-kronos-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d110ed903961a6950cf5de4019f0f337122fadc51bed27728ef56e34211a329b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111427

Malicious code in markdown-pdf-child-process-chakra-ui-winston npm...

EUVD-2025-116534

Malicious code in arcturus-dependencies-transport-child-process npm...

EUVD-2025-120100

Malicious code in yonder-child-process-writable-postgres npm...

EUVD-2025-123365

Malicious code in process-mocha-loop-colors npm...

EUVD-2025-111538

Malicious code in luna-perseus-process-pavo npm...

EUVD-2025-116454

Malicious code in atlas-mdx-pyxis-process npm...

EUVD-2025-121745

Malicious code in spica-spinner-rimraf-process npm...

EUVD-2025-115353

Malicious code in child-process-prettier-stylelint-draco-vuepress npm...

EUVD-2025-113233

Malicious code in geckodriver-process-module-draco npm...

EUVD-2025-123193

Malicious code in proxima-process-grus-fomalhaut npm...

EUVD-2025-123363

Malicious code in process-mysql-graphql-achernar npm...

EUVD-2025-123357

Malicious code in process-radiant-frontend-version npm...

Malicious code in process-fornax-local-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3220f679eb62fd137d7337ff1fea5b4a82a683412b487acdc28e5e9e26e04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115374

Malicious code in charon-semantic-release-nashira-child-process npm...

EUVD-2025-120942

Malicious code in unuk-sirius-quantum-process npm...

Malicious code in astro-nextjs-sedna-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20611358ebe53864fba342e25d51ab7ae0970d8e843144dbb1ad433758e9a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122404

Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict npm...

Malicious code in quito-phoenix-process-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1b557507e22a34ed6c77ffa39819f688ae4f6a674cf5520022347c6e212560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-writable-gacrux-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7a73dfed72bf62e1c1142ffba2b771c5040d09b3102fe730d95184da5ce29f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...