672 matches found
EUVD-2025-114775
Malicious code in css-minimizer-webpack-plugin-transport-spawn-command npm...
Malicious code in spawn-figures-async-loglevel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56662d4f8f23678a960291b8d19f3aa545e75a2346fcb87bce99a7c591855648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116294
Malicious code in await-spawn-galaxy-spica npm...
Malicious code in quark-aquarius-eslint-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef150bf2f6492d4b3a11aa781ebcc8b2feb63ab32cb4e23d322a78ac538fc77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fornax-mysql-bellatrix-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bad8ead92b1bfb381b56cccc2105b1947b8cd2bdc46a1e6b12690cf923b0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eris-spawn-lynx-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bca2ce67e69c781a2f7322159d6df5b7e238d726cee97432e040ca27711aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115422
Malicious code in changelog-spawn-spectron-webdriver-query npm...
EUVD-2025-111605
Malicious code in loglevel-indus-spawn-scorpius npm...
MAL-2025-147978 Malicious code in sirius-spawn-chromedriver-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc5d124420e86b1c5400344bb1baaefbf2c44048bd0b668422e414bac3499a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120460
Malicious code in wezen-spawn-oberon-zenith npm...
EUVD-2025-120853
Malicious code in ursa-spawn-writable-acamar npm...
EUVD-2025-121822
Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin npm...
EUVD-2025-112196
Malicious code in jest-airbnb-remark-spawn npm...
Malicious code in upgrade-spawn-server-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6ae84aa5b7fe85307aa839241cc7ad1bc03413134bad3133d229dd5cb63412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123552
Malicious code in polaris-spawn-ora-perseus npm...
EUVD-2025-121821
Malicious code in spawn-nuxtjs-titan-public npm...
EUVD-2025-121827
Malicious code in spawn-io-cosmiconfig-jest npm...
EUVD-2025-113848
Malicious code in europa-cors-cressida-spawn npm...