1104 matches found
EUVD-2025-123819
Malicious code in perseus-ora-spawn-uglify-js npm...
EUVD-2025-121294
Malicious code in tethys-spawn-selenium-wasat npm...
EUVD-2025-120460
Malicious code in wezen-spawn-oberon-zenith npm...
MAL-2025-147814 Malicious code in selenium-spawn-graphql-scripts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bb56bc9a2d81ce14a1bcff9a5dbebd2ee2ca22986cf4b6b12e88a5f9903b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146918 Malicious code in quark-aquarius-eslint-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef150bf2f6492d4b3a11aa781ebcc8b2feb63ab32cb4e23d322a78ac538fc77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139574 Malicious code in arcturus-nightwatch-spawn-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c280417853cf4fa3ede78d1dbb013a5560315f5f5d0530853f868a8b13e1d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sirius-spawn-chromedriver-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc5d124420e86b1c5400344bb1baaefbf2c44048bd0b668422e414bac3499a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124078
Malicious code in ophiuchus-spawn-altair-terser npm...
EUVD-2025-122831
Malicious code in readable-spawn-miranda-husky npm...
Malicious code in mongodb-spawn-ursa-jasmine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aac006721f2dd7978db07e64591af28893d16f07f61a47b2d7eac7fb0fed7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115167
Malicious code in commitizen-spawn-csv-auriga npm...
Malicious code in quark-aquarius-eslint-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef150bf2f6492d4b3a11aa781ebcc8b2feb63ab32cb4e23d322a78ac538fc77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ariel-spawn-commitlint-config-angular-cressida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17a4b690231e8993be588436a23517703f8f8c1099c2280e2dc9aed2d0c9b7a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in commitizen-cache-spawn-vega (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0ef65d7296351d71c06f748a304a64aa2e5ce87ebd5092bc4ab6d793f938de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111854
Malicious code in leda-capella-celeste-spawn npm...
Malicious code in upgrade-spawn-server-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a6ae84aa5b7fe85307aa839241cc7ad1bc03413134bad3133d229dd5cb63412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120637
Malicious code in wasat-jabbah-nodemon-spawn npm...
Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...