EUVD-2025-121788

Malicious code in spectron-webdriver-process-yonder-antd npm...

Malicious code in castor-xo-process-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f7e9ee758d3225c0ac906b5d2c0af7eafe128a6688181ebd5cc15facb09c278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123372

Malicious code in process-figures-run-script-node-config npm...

EUVD-2025-121871

Malicious code in socketio-geckodriver-child-process-exec npm...

EUVD-2025-121054

Malicious code in uglify-js-hexo-zenobia-child-process npm...

EUVD-2025-122921

Malicious code in quito-phoenix-process-inquirer npm...

EUVD-2025-123268

Malicious code in promise-umbra-achernar-child-process npm...

Malicious code in child-process-foundation-eclipse-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c4f59859c4a243e08dd39070370b2f65a3c8c6d979f8032023e0bd0b311b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114670

Malicious code in dactyl-epimetheus-child-process-pino-pretty npm...

EUVD-2025-115364

Malicious code in child-process-altair-convict-dynamo npm...

EUVD-2025-112805

Malicious code in hermes-child-process-event-firebase npm...

EUVD-2025-114077

Malicious code in enceladus-process-sqlite-google npm...

EUVD-2025-123743

Malicious code in phoebe-sagitta-gridsome-child-process npm...

MAL-2025-141560 Malicious code in deneb-ultra-process-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf421c8337829ccd7752197bb60c5b21fc674b453bfedc4a03db7644b960f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143646 Malicious code in inquirer-duplex-process-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915e7cbf95b48a2c8efed1a02fed0f77e49a42ae939fae8791389eff9a7ab0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142879 Malicious code in geckodriver-process-module-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b003134420a4f6d79fd4f63c839be965746e5cf508de21a4f403624f0104e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149657 Malicious code in xenon-process-levels-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e2c758d7d5bda40bcd116ee3544ebbbc9fd22d8e381982f8b1e49428309067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142237 Malicious code in eslint-plugin-process-sails-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54131fa2d2dcc4b78de6cb5b6d09342e6dc5740aaa9fbbe5e0ec5cac6985a259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139431 Malicious code in antares-phenomic-process-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a73308f60ba615f3627d57d87db5205c9f4eba95159507cd9f0fe02e687f95a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-install-rollup-plugin-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d53156fae37387a3d630d0ef0fa551919d0a384042b09cca6044d0c86ea7788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...