MAL-2025-146102 Malicious code in perseus-ora-spawn-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148097 Malicious code in spawn-gemini-mongoose-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538449fd0956eee408cef5ac551636c4e3e51f952b988445fc27d61f1cf38fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121685

Malicious code in sqlite-spawn-ultra-eclipse npm...

EUVD-2025-114130

Malicious code in element-ui-proxima-sync-spawn npm...

EUVD-2025-121828

Malicious code in spawn-gemini-mongoose-transform npm...

Malicious code in bunyan-heka-spawn-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db5614c01d3e27e5f9eea4ed9ba6041855f567bcb63abe84b582e58f8116e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-spawn-writable-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98529c833cbb87e017a27e085a759a2b5c2daa8f6c81183a5d835f87821f4d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111854

Malicious code in leda-capella-celeste-spawn npm...

EUVD-2025-121390

Malicious code in terser-spawn-pulsar-mdx npm...

EUVD-2025-114084

Malicious code in enceladus-delphinus-spawn-farout npm...

EUVD-2025-124122

Malicious code in odin-mira-spawn-protractor npm...

EUVD-2025-111993

Malicious code in karma-spawn-webpack-yonder npm...

EUVD-2025-113926

Malicious code in eris-spawn-lynx-testcafe npm...

EUVD-2025-124564

Malicious code in neptune-dotenv-safe-antares-spawn npm...

EUVD-2025-111690

Malicious code in link-server-bootes-spawn npm...

EUVD-2025-116874

Malicious code in aether-cli-ariel-spawn npm...

EUVD-2025-120460

Malicious code in wezen-spawn-oberon-zenith npm...

EUVD-2025-123267

Malicious code in promise-ursa-testcafe-spawn npm...

EUVD-2025-121838

Malicious code in solis-spawn-vuetify-triton npm...

Malicious code in vortex-norma-spawn-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9871526da17ffbeb1990534998c1ea3e9b0812ae4bbd2867c1b095eabba085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...