EUVD-2025-121712

Malicious code in spinner-uglify-js-sequelize-sync npm...

EUVD-2025-112103

Malicious code in jsonp-spinner-dotenv-dotenv-safe npm...

EUVD-2025-121708

Malicious code in spinner-winston-procyon-axios npm...

EUVD-2025-122898

Malicious code in radiant-spinner-prompts-puppeteer npm...

Malicious code in spinner-envconfig-regulus-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3094685581e8535286d53ba4a65d093b12a027d9f305edb393fc8e9a267df3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121727

Malicious code in spinner-grunt-umbra-virgo npm...

EUVD-2025-120930

Malicious code in update-markdown-pdf-pyxis-spinner npm...

EUVD-2025-116032

Malicious code in bootes-algol-promise-spinner npm...

EUVD-2025-122971

Malicious code in quasar-indus-spinner-pulsar npm...

EUVD-2025-114089

Malicious code in enceladus-auriga-janus-spinner npm...

Malicious code in rest-arcturus-io-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d0b8686eed7092e318656016dd7a3307ce443b16ea6fab1ef179d685a0e7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143189 Malicious code in hapi-markdown-dotenv-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3293fb2ca9b432971d77bf3217d2e02ba442d2f5f05ff47e51ef92b2ca63b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113861

Malicious code in eslint-spinner-websockets-frontend npm...

EUVD-2025-112371

Malicious code in iota-spinner-dione-xml npm...

EUVD-2025-121709

Malicious code in spinner-weywot-pegasus-barnard npm...

Malicious code in spinner-spectron-auriga-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9578d72dff0c43f30d887dbf39787ae56004d55f4d197d5557d68d9385666f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-spinner-rimraf-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d87ec4e5f35f7aac34b2013148340f8da18a20c969c2efad234a7f9588de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123617

Malicious code in pm2-odin-carina-spinner npm...

Malicious code in quasar-indus-spinner-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c73023c08d8063b4edb53e7982c87d09c97a499f0d4949923e44741ed808395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cors-spinner-firebase-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d50d2148eb02e8dee26102481118cc6dce36328fb9fb1b5c7f2a72b52d384d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...