EUVD-2025-180241

Malicious code in augmentedreality-version-wavefunction-spawn npm...

EUVD-2025-179583

Malicious code in convict-spawn-gravitationalwave-stream npm...

Malicious code in brane-nashira-cluster-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95958810256e12bc1d81c9af029c889a3b720ed25cf4abef9c6a636340b635b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176295

Malicious code in socketio-spawn-pyxis-nestjs npm...

EUVD-2025-179973

Malicious code in brane-nashira-cluster-spawn npm...

EUVD-2025-180048

Malicious code in biosignature-spawn-slidev-envconfig npm...

EUVD-2025-179407

Malicious code in dagda-spawn-selenium-vega npm...

EUVD-2025-176276

Malicious code in spawn-rigel-petrology-ganymede npm...

EUVD-2025-179486

Malicious code in cryonics-meteor-spawn-halley npm...

EUVD-2025-176281

Malicious code in spawn-corvus-elektra-iota npm...

EUVD-2025-180064

Malicious code in bioinformatics-achernar-spawn-ganymede npm...

Malicious code in spawn-webpack-nightwatch-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318806806d481ef740dd17c622bc164b94a295e29a9282fc7c00d3951dfeaee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-spawn-gravitationalwave-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d86882e0076d80ab9827d708aa6534aa225eee0e3afeb4af5dcf612c62f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176280

Malicious code in spawn-exec-zenobia-ganymede npm...

EUVD-2025-176279

Malicious code in spawn-miranda-publish-galaxy npm...

EUVD-2025-176955

Malicious code in proxima-spawn-mongoose-brane npm...

EUVD-2025-179741

Malicious code in child-process-blitz-spawn-wasat npm...

MAL-2025-189594 Malicious code in spawn-corvus-elektra-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45a2d1730f87b0c7ad3fc6d33915857fcf5d83c077794051e825175b6ec7b82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-nebula-spawn-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0f439f3314d535195f43a58fea27de3a38211dbd7367c379d737eb31a99b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186475 Malicious code in dagda-spawn-selenium-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 577b28c0b18bb61c9dd2efacf6fc2620489f0e87c664c1ceb83b6663cf92d7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...