3 matches found
EUVD-2025-116294
Malicious code in await-spawn-galaxy-spica npm...
EUVD-2025-111917
Malicious code in koa-module-bootstrap-spica npm...
MAL-2025-141650 Malicious code in dione-spica-node-sass-puppeteer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3914e11caf443d84492b59f56eb90f24c3ae39be33691d79c7ce9ecf0555ad0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...