Malicious code in oberon-xenos-process-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e025f47c913177a7992cfaf90cc9e7fb5b31a0018e27e73399b2e5c34a67df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115861

Malicious code in bunyan-heka-spawn-json npm...

Malicious code in spawn-wasat-kronos-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d110ed903961a6950cf5de4019f0f337122fadc51bed27728ef56e34211a329b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114489

Malicious code in development-exec-spawn-perseus npm...

Malicious code in octans-pino-spawn-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8acae40544dae96658957457b5ded4ab869bd33160c695cfed84d96c16b7950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-spawn-writable-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98529c833cbb87e017a27e085a759a2b5c2daa8f6c81183a5d835f87821f4d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124162

Malicious code in oberon-xenos-process-spawn npm...

Malicious code in selenium-spawn-graphql-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bb56bc9a2d81ce14a1bcff9a5dbebd2ee2ca22986cf4b6b12e88a5f9903b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-spawn-commitlint-config-angular-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a4b690231e8993be588436a23517703f8f8c1099c2280e2dc9aed2d0c9b7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111803

Malicious code in less-farout-spawn-odin npm...

EUVD-2025-120637

Malicious code in wasat-jabbah-nodemon-spawn npm...

EUVD-2025-123938

Malicious code in passport-leda-spectron-spawn npm...

EUVD-2025-124080

Malicious code in ophiuchus-sedna-ariel-spawn npm...

EUVD-2025-111927

Malicious code in kinetic-spawn-stop-browserify npm...

EUVD-2025-121825

Malicious code in spawn-kastra-got-json npm...

EUVD-2025-121819

Malicious code in spawn-sirius-venus-jovian npm...

EUVD-2025-116506

Malicious code in ariel-spawn-commitlint-config-angular-cressida npm...

EUVD-2025-122831

Malicious code in readable-spawn-miranda-husky npm...

EUVD-2025-113848

Malicious code in europa-cors-cressida-spawn npm...

EUVD-2025-123128

Malicious code in publish-materialize-spawn-quark npm...