EUVD-2025-180119

Malicious code in bellatrix-axios-spica-geoarchaeology npm...

EUVD-2025-176252

Malicious code in spica-html-webpack-plugin-kronos-husky npm...

EUVD-2025-178698

Malicious code in global-polaris-spica-iota npm...

MAL-2025-187772 Malicious code in library-archaeoastronomy-winston-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe3dcb39beccc420438542d11282f21171bd86c34f18ac5d213fcc6caa0eed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176251

Malicious code in spica-oberon-sirius-local npm...

EUVD-2025-178110

Malicious code in library-archaeoastronomy-winston-spica npm...

Malicious code in umbriel-spica-rate-limiter-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24a2c3e8a9bab387f482012d72bbd73ca8104bd9ac31e0303a0cd6bd10374ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-html-webpack-plugin-kronos-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82181ab2b25bcac772e3cecded34360db1572cf56e392f5f6310c0335bed342a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179730

Malicious code in chromedriver-spica-repository-epigenetics npm...

EUVD-2025-178851

Malicious code in fornax-jest-ariel-spica npm...

EUVD-2025-177798

Malicious code in miranda-spica-sails-superposition npm...

EUVD-2025-175609

Malicious code in webdriver-manager-venus-coronalmassejection-spica npm...

Malicious code in spica-oberon-sirius-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2795c1c908cdc462362e80d9776884cf1160dc014dbfb2f9820f5ac940eb6813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185763 Malicious code in bellatrix-axios-spica-geoarchaeology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f14019bc97e0f8d1949f5602fee6d12a0badde19fddab0ccb48bfcec33580b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177514

Malicious code in nucleosynthesis-neptunology-spica-stratosphere npm...

MAL-2025-187184 Malicious code in global-polaris-spica-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c782e5acf5440df7201aeaf4eab97c6ad886082ad36c3af25de05758917d3db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176072

Malicious code in tailwindcss-bunyan-spica-perseus npm...

EUVD-2025-175825

Malicious code in umbriel-spica-rate-limiter-auriga npm...

EUVD-2025-176131

Malicious code in superagent-spica-thermochronology-node-sass npm...

EUVD-2025-121756

Malicious code in spica-mocha-castor-inquirer npm...