EUVD-2025-120637

Malicious code in wasat-jabbah-nodemon-spawn npm...

EUVD-2025-124078

Malicious code in ophiuchus-spawn-altair-terser npm...

EUVD-2025-123473

Malicious code in postgres-spawn-rigel-private npm...

EUVD-2025-121826

Malicious code in spawn-javascript-octans-cordelia npm...

EUVD-2025-120853

Malicious code in ursa-spawn-writable-acamar npm...

EUVD-2025-115183

Malicious code in commitizen-cache-spawn-vega npm...

Malicious code in commitizen-cache-spawn-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0ef65d7296351d71c06f748a304a64aa2e5ce87ebd5092bc4ab6d793f938de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121832

Malicious code in spawn-apollo-envconfig-jabbah npm...

Malicious code in promise-ursa-testcafe-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e74f0fa1c64ea786e96b6603912346725d9b64ad775fcaf397f28f74b1d7420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-gemini-mongoose-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538449fd0956eee408cef5ac551636c4e3e51f952b988445fc27d61f1cf38fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-spawn-ultra-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be06e9b3e8c2658261f00ccc757cc103e2be3f4c5ae7c655f5dd153755439ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124080

Malicious code in ophiuchus-sedna-ariel-spawn npm...

EUVD-2025-121164

Malicious code in transform-helios-jekyll-spawn npm...

EUVD-2025-123938

Malicious code in passport-leda-spectron-spawn npm...

EUVD-2025-111927

Malicious code in kinetic-spawn-stop-browserify npm...

EUVD-2025-121825

Malicious code in spawn-kastra-got-json npm...

EUVD-2025-115422

Malicious code in changelog-spawn-spectron-webdriver-query npm...

Malicious code in selenium-spawn-graphql-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bb56bc9a2d81ce14a1bcff9a5dbebd2ee2ca22986cf4b6b12e88a5f9903b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ariel-spawn-commitlint-config-angular-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a4b690231e8993be588436a23517703f8f8c1099c2280e2dc9aed2d0c9b7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-ora-spawn-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f9b2d497f009b9eed372879b921b29be260e3950fa8d2f8639d0075b3e34e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...