EUVD-2025-116053

Malicious code in blitz-leda-meteor-spawn npm...

Malicious code in spawn-figures-async-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56662d4f8f23678a960291b8d19f3aa545e75a2346fcb87bce99a7c591855648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-spawn-lynx-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bca2ce67e69c781a2f7322159d6df5b7e238d726cee97432e040ca27711aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111690

Malicious code in link-server-bootes-spawn npm...

EUVD-2025-124564

Malicious code in neptune-dotenv-safe-antares-spawn npm...

EUVD-2025-121685

Malicious code in sqlite-spawn-ultra-eclipse npm...

EUVD-2025-114775

Malicious code in css-minimizer-webpack-plugin-transport-spawn-command npm...

EUVD-2025-111993

Malicious code in karma-spawn-webpack-yonder npm...

Malicious code in quark-aquarius-eslint-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef150bf2f6492d4b3a11aa781ebcc8b2feb63ab32cb4e23d322a78ac538fc77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121390

Malicious code in terser-spawn-pulsar-mdx npm...

EUVD-2025-116264

Malicious code in axios-spawn-metalsmith-hyperion npm...

Malicious code in bunyan-heka-spawn-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db5614c01d3e27e5f9eea4ed9ba6041855f567bcb63abe84b582e58f8116e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121828

Malicious code in spawn-gemini-mongoose-transform npm...

Malicious code in ursa-spawn-writable-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98529c833cbb87e017a27e085a759a2b5c2daa8f6c81183a5d835f87821f4d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121838

Malicious code in solis-spawn-vuetify-triton npm...

EUVD-2025-114130

Malicious code in element-ui-proxima-sync-spawn npm...

EUVD-2025-120492

Malicious code in weywot-envconfig-meteor-spawn npm...

Malicious code in vortex-norma-spawn-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9871526da17ffbeb1990534998c1ea3e9b0812ae4bbd2867c1b095eabba085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123267

Malicious code in promise-ursa-testcafe-spawn npm...

MAL-2025-145799 Malicious code in odin-mira-spawn-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aa37a11a06e592a83031a43a7cd565dfb52011bdb1eddb5c685681580c515f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...