EUVD-2025-121765

Malicious code in spica-elara-halley-aquarius npm...

Malicious code in spica-elara-halley-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863316f224c8dee2da79527ce27a665da7fc1ef4f1ee3791d474b5db8d1805dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111221

Malicious code in metalsmith-xenos-spica-elara npm...