Malicious code in geckodriver-nebula-spawn-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0f439f3314d535195f43a58fea27de3a38211dbd7367c379d737eb31a99b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180048

Malicious code in biosignature-spawn-slidev-envconfig npm...

EUVD-2025-176278

Malicious code in spawn-nova-antares-sync npm...

EUVD-2025-176275

Malicious code in spawn-scorpius-antares-hexo npm...

EUVD-2025-178998

Malicious code in eventhoriz-yonder-heliophysics-spawn npm...

Malicious code in convict-spawn-gravitationalwave-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d86882e0076d80ab9827d708aa6534aa225eee0e3afeb4af5dcf612c62f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179486

Malicious code in cryonics-meteor-spawn-halley npm...

EUVD-2025-176350

Malicious code in sirius-stop-umbra-spawn npm...

EUVD-2025-176274

Malicious code in spawn-venus-hydra-cordelia npm...

EUVD-2025-177586

Malicious code in nightwatch-spawn-leda-tool npm...

EUVD-2025-176282

Malicious code in spawn-auth0-less-loader-phoenix npm...

MAL-2025-185834 Malicious code in biosignature-spawn-slidev-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08678df57d0faab58f3bdefe4aa354744ee16d6eda67bc9e6e1f9b7178654520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186475 Malicious code in dagda-spawn-selenium-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577b28c0b18bb61c9dd2efacf6fc2620489f0e87c664c1ceb83b6663cf92d7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189594 Malicious code in spawn-corvus-elektra-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45a2d1730f87b0c7ad3fc6d33915857fcf5d83c077794051e825175b6ec7b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177137

Malicious code in planetology-sociobiology-spawn-deimos npm...

MAL-2025-177144 Malicious code in nuyar-da-rofdaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fd259eea2fc0d4274e6b1bea05e716d4acc774317dc35bbb28abfa06c41682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-tool-concurrently-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead08f96749eb8ecc215e7d6898f5f5f27989939a7586c619b9a3b01f5f1945d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114417

Malicious code in dorado-local-dotenv-safe-spawn npm...

EUVD-2025-120853

Malicious code in ursa-spawn-writable-acamar npm...

Malicious code in aether-cli-ariel-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cafe7413479fb9fed550e2556cbdbe777ac1cf62089cac36a45b27a23e59ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...