1104 matches found
Malicious code in brane-nashira-cluster-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95958810256e12bc1d81c9af029c889a3b720ed25cf4abef9c6a636340b635b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176350
Malicious code in sirius-stop-umbra-spawn npm...
EUVD-2025-176275
Malicious code in spawn-scorpius-antares-hexo npm...
MAL-2025-177144 Malicious code in nuyar-da-rofdaad (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fd259eea2fc0d4274e6b1bea05e716d4acc774317dc35bbb28abfa06c41682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spawn-gemini-mongoose-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 538449fd0956eee408cef5ac551636c4e3e51f952b988445fc27d61f1cf38fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bunyan-heka-spawn-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db5614c01d3e27e5f9eea4ed9ba6041855f567bcb63abe84b582e58f8116e2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spawn-tool-concurrently-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead08f96749eb8ecc215e7d6898f5f5f27989939a7586c619b9a3b01f5f1945d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ursa-spawn-writable-acamar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98529c833cbb87e017a27e085a759a2b5c2daa8f6c81183a5d835f87821f4d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in selenium-spawn-graphql-scripts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bb56bc9a2d81ce14a1bcff9a5dbebd2ee2ca22986cf4b6b12e88a5f9903b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116506
Malicious code in ariel-spawn-commitlint-config-angular-cressida npm...
EUVD-2025-113848
Malicious code in europa-cors-cressida-spawn npm...
EUVD-2025-116665
Malicious code in antares-sagitta-hermes-spawn npm...
Malicious code in promise-ursa-testcafe-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e74f0fa1c64ea786e96b6603912346725d9b64ad775fcaf397f28f74b1d7420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in octans-pino-spawn-redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8acae40544dae96658957457b5ded4ab869bd33160c695cfed84d96c16b7950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123552
Malicious code in polaris-spawn-ora-perseus npm...
EUVD-2025-123938
Malicious code in passport-leda-spectron-spawn npm...
EUVD-2025-121832
Malicious code in spawn-apollo-envconfig-jabbah npm...
EUVD-2025-115794
Malicious code in callback-restart-spawn-cordelia npm...
Malicious code in await-spawn-galaxy-spica (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b43b63aa9b116de12f98fe72753cafc805de0801861e451fb794650f62b8952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...