EUVD-2025-121823

Malicious code in spawn-mensa-nestjs-mini-css-extract-plugin npm...

EUVD-2025-122302

Malicious code in sagitta-spica-acamar-spawn npm...

EUVD-2025-112837

Malicious code in hercules-command-spawn-hapi npm...

EUVD-2025-112104

Malicious code in jsonp-spawn-cypress-solis npm...

EUVD-2025-123128

Malicious code in publish-materialize-spawn-quark npm...

EUVD-2025-121947

Malicious code in sirius-spawn-chromedriver-ini npm...

EUVD-2025-121819

Malicious code in spawn-sirius-venus-jovian npm...

EUVD-2025-112755

Malicious code in html-webpack-plugin-cache-spawn-jovian npm...

EUVD-2025-121829

Malicious code in spawn-figures-async-loglevel npm...

Malicious code in await-spawn-galaxy-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b43b63aa9b116de12f98fe72753cafc805de0801861e451fb794650f62b8952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-sagitta-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd83427e56df88a4c28b00a435090b1a952c4b1b7a52f9c58f18630af7a3621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121818

Malicious code in spawn-tool-concurrently-umbra npm...

EUVD-2025-111304

Malicious code in meissa-levels-telesto-spawn npm...

EUVD-2025-124777

Malicious code in mongodb-spawn-ursa-jasmine npm...

Malicious code in odin-mira-spawn-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aa37a11a06e592a83031a43a7cd565dfb52011bdb1eddb5c685681580c515f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146918 Malicious code in quark-aquarius-eslint-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef150bf2f6492d4b3a11aa781ebcc8b2feb63ab32cb4e23d322a78ac538fc77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114417

Malicious code in dorado-local-dotenv-safe-spawn npm...

MAL-2025-139574 Malicious code in arcturus-nightwatch-spawn-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c280417853cf4fa3ede78d1dbb013a5560315f5f5d0530853f868a8b13e1d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142692 Malicious code in framework-quasar-spawn-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf3c1ced05681da6b00f91ff5765d1da4c60751cf4ae4ef9f608e00d15fc266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...