EUVD-2025-176276

Malicious code in spawn-rigel-petrology-ganymede npm...

MAL-2025-177144 Malicious code in nuyar-da-rofdaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fd259eea2fc0d4274e6b1bea05e716d4acc774317dc35bbb28abfa06c41682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121831

Malicious code in spawn-chai-ursa-eslint npm...

EUVD-2025-112586

Malicious code in ignite-spawn-fornax-umbriel npm...

EUVD-2025-123949

Malicious code in parcel-spawn-dotenv-parse-variables-ultra npm...

EUVD-2025-121947

Malicious code in sirius-spawn-chromedriver-ini npm...

EUVD-2025-123701

Malicious code in pino-jwt-spawn-koa npm...

EUVD-2025-112104

Malicious code in jsonp-spawn-cypress-solis npm...

EUVD-2025-121830

Malicious code in spawn-dotenv-dactyl-sirius npm...

EUVD-2025-112558

Malicious code in indus-apex-spawn-europa npm...

EUVD-2025-113848

Malicious code in europa-cors-cressida-spawn npm...

EUVD-2025-112196

Malicious code in jest-airbnb-remark-spawn npm...

EUVD-2025-116294

Malicious code in await-spawn-galaxy-spica npm...

EUVD-2025-115899

Malicious code in bulma-blaze-europa-spawn npm...

EUVD-2025-111304

Malicious code in meissa-levels-telesto-spawn npm...

EUVD-2025-112837

Malicious code in hercules-command-spawn-hapi npm...

EUVD-2025-115732

Malicious code in canopus-spawn-quito-cassini npm...

Malicious code in antares-sagitta-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd83427e56df88a4c28b00a435090b1a952c4b1b7a52f9c58f18630af7a3621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116665

Malicious code in antares-sagitta-hermes-spawn npm...

Malicious code in spawn-apollo-envconfig-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7581617c1f3dee8f77877ca1efa376a3bccbff72945c680780c545962c3ea85e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...