EUVD-2025-120930

Malicious code in update-markdown-pdf-pyxis-spinner npm...

Malicious code in spinner-configstore-lynx-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ae63f9bdf59bd6c85aee247ecc80ee241e3e6ca01ddf21e3b29e53c823f97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120189

Malicious code in xo-adonis-callisto-spinner npm...

MAL-2025-144754 Malicious code in materialize-semantic-ui-cache-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d775e954d2c20553f2f06d65cf4bcd74bf57e21ea203e610cc2c8e1d434719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121713

Malicious code in spinner-triton-nestjs-mysql npm...

EUVD-2025-121736

Malicious code in spinner-configstore-lynx-rate-limiter npm...

Malicious code in hugo-spinner-optimize-css-assets-webpack-plugin-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef6530f326f3a9376699cc3340f33a0ee974cd41b8673b2e9ce2bf4aacce3bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview paysera-loading-spinner is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious code in paysera-loading-spinner (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d860e39a767111b60ddcd5e511c83f876e44a4ddcfe9d499c215834d9fe4fbaf Any computer that has this package installed or running should be considered...

MAL-2025-48751 Malicious code in paysera-loading-spinner (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d860e39a767111b60ddcd5e511c83f876e44a4ddcfe9d499c215834d9fe4fbaf Any computer that has this package installed or running should be considered...

EUVD-2025-21618

Malicious code in bioql PyPI...

EUVD-2025-15500

Malicious code in bioql PyPI...

Malicious code in google-wormhole-xerxes-spinner (npm)

The package google-wormhole-xerxes-spinner was found to contain malicious code...

Malicious code in tailwindcss-spinner-dagda-chalk (npm)

The package tailwindcss-spinner-dagda-chalk was found to contain malicious code...

Malicious code in jekyll-spinner-barnard-non-blocking (npm)

The package jekyll-spinner-barnard-non-blocking was found to contain malicious code...

Malicious code in javascript-spinner-rocket-nightwatch (npm)

The package javascript-spinner-rocket-nightwatch was found to contain malicious code...

MAL-2025-46132 Malicious code in spinner-dendrochronology-auth0-mensa (npm)

The package spinner-dendrochronology-auth0-mensa was found to contain malicious code...

MAL-2025-44768 Malicious code in jekyll-spinner-barnard-non-blocking (npm)

The package jekyll-spinner-barnard-non-blocking was found to contain malicious code...

MAL-2025-44767 Malicious code in javascript-spinner-rocket-nightwatch (npm)

The package javascript-spinner-rocket-nightwatch was found to contain malicious code...

Malicious code in spinner-dendrochronology-auth0-mensa (npm)

The package spinner-dendrochronology-auth0-mensa was found to contain malicious code...