EUVD-2025-113472

Malicious code in fornax-mysql-bellatrix-spawn npm...

EUVD-2025-113926

Malicious code in eris-spawn-lynx-testcafe npm...

EUVD-2025-121294

Malicious code in tethys-spawn-selenium-wasat npm...

EUVD-2025-120744

Malicious code in vortex-norma-spawn-fusion npm...

EUVD-2025-116506

Malicious code in ariel-spawn-commitlint-config-angular-cressida npm...

EUVD-2025-122831

Malicious code in readable-spawn-miranda-husky npm...

EUVD-2025-123128

Malicious code in publish-materialize-spawn-quark npm...

Malicious code in mongodb-spawn-ursa-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aac006721f2dd7978db07e64591af28893d16f07f61a47b2d7eac7fb0fed7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121825

Malicious code in spawn-kastra-got-json npm...

EUVD-2025-121577

Malicious code in subscription-apollo-hermes-spawn npm...

Malicious code in sirius-spawn-chromedriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc5d124420e86b1c5400344bb1baaefbf2c44048bd0b668422e414bac3499a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116665

Malicious code in antares-sagitta-hermes-spawn npm...

EUVD-2025-111304

Malicious code in meissa-levels-telesto-spawn npm...

EUVD-2025-111854

Malicious code in leda-capella-celeste-spawn npm...

EUVD-2025-112558

Malicious code in indus-apex-spawn-europa npm...

Malicious code in await-spawn-galaxy-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b43b63aa9b116de12f98fe72753cafc805de0801861e451fb794650f62b8952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-norma-spawn-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9871526da17ffbeb1990534998c1ea3e9b0812ae4bbd2867c1b095eabba085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121390

Malicious code in terser-spawn-pulsar-mdx npm...

EUVD-2025-116102

Malicious code in betelgeuse-registry-spawn-gulp npm...

EUVD-2025-111927

Malicious code in kinetic-spawn-stop-browserify npm...