EUVD-2025-113472

Malicious code in fornax-mysql-bellatrix-spawn npm...

EUVD-2025-121294

Malicious code in tethys-spawn-selenium-wasat npm...

EUVD-2025-115794

Malicious code in callback-restart-spawn-cordelia npm...

MAL-2025-145777 Malicious code in octans-pino-spawn-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8acae40544dae96658957457b5ded4ab869bd33160c695cfed84d96c16b7950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145983 Malicious code in passport-leda-spectron-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f602944b892aa1b431311a550c2bdfafa04a4576371a9039de3d80d1165b73af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140941 Malicious code in commitizen-spawn-csv-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216aa139732e8f8ebbeb9efa1d382e08a1049395c2a03bbfb6ae1873421a9b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148095 Malicious code in spawn-dotenv-dactyl-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f490cc453d04177823dab83ad611cac695ca9f8cc9c9eae7d0899a7ee3faf125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123949

Malicious code in parcel-spawn-dotenv-parse-variables-ultra npm...

EUVD-2025-112755

Malicious code in html-webpack-plugin-cache-spawn-jovian npm...

EUVD-2025-114417

Malicious code in dorado-local-dotenv-safe-spawn npm...

EUVD-2025-122302

Malicious code in sagitta-spica-acamar-spawn npm...

EUVD-2025-115167

Malicious code in commitizen-spawn-csv-auriga npm...

EUVD-2025-123473

Malicious code in postgres-spawn-rigel-private npm...

EUVD-2025-121826

Malicious code in spawn-javascript-octans-cordelia npm...

MAL-2025-139574 Malicious code in arcturus-nightwatch-spawn-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c280417853cf4fa3ede78d1dbb013a5560315f5f5d0530853f868a8b13e1d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121947

Malicious code in sirius-spawn-chromedriver-ini npm...

MAL-2025-142692 Malicious code in framework-quasar-spawn-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf3c1ced05681da6b00f91ff5765d1da4c60751cf4ae4ef9f608e00d15fc266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123004

Malicious code in quark-aquarius-eslint-spawn npm...

EUVD-2025-124078

Malicious code in ophiuchus-spawn-altair-terser npm...

MAL-2025-148240 Malicious code in sqlite-spawn-ultra-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be06e9b3e8c2658261f00ccc757cc103e2be3f4c5ae7c655f5dd153755439ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...