EUVD-2025-179529

Malicious code in cosmogenic-spinner-andromeda-quasarjet npm...

MAL-2025-188919 Malicious code in proxima-shelljs-spinner-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7bd32ce89463fc87f2bf996cd96de28e6fa265c87a586e1414a63e912a88fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190462 Malicious code in zephyr-eris-spinner-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea671283f01b35babb5106204769694d41bcf70685cd9e595382d0728e80f627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-adonis-jest-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ce7a252c8fb466cb202f8d2441a363fa351a5ccf8b69a0cfdd48a0238bb6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122898

Malicious code in radiant-spinner-prompts-puppeteer npm...

EUVD-2025-121709

Malicious code in spinner-weywot-pegasus-barnard npm...

Malicious code in centauri-delphinus-cypress-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06e90006f91809c42a81f6b7bc4f6c1dd7f04d7890b0bdc6e8f6a7953e62370c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121738

Malicious code in spinner-castor-commitizen-dependencies npm...

EUVD-2025-121713

Malicious code in spinner-triton-nestjs-mysql npm...

EUVD-2025-120354

Malicious code in writable-pipe-terser-spinner npm...

EUVD-2025-123771

Malicious code in phoebe-electron-spinner-ophiuchus npm...

EUVD-2025-122735

Malicious code in rehype-spinner-wasat-helios npm...

Malicious code in spinner-uglify-js-sequelize-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec3d26ff88984e14fb77619434a0b3aa7a4dbbd8742914e7a787d85979a1bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121730

Malicious code in spinner-fomalhaut-postcss-loader-private npm...

EUVD-2025-113559

Malicious code in fomalhaut-spinner-capella-less npm...

Malicious code in spinner-venus-izar-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22743ffdcb88a3ad3f6bc32150254dadfa3f45695c7f11d0e9a16ea3ac1d126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121720

Malicious code in spinner-nuxtjs-dotenv-parse-variables-chromedriver npm...

EUVD-2025-115580

Malicious code in centauri-delphinus-cypress-spinner npm...

EUVD-2025-121721

Malicious code in spinner-node-config-sync-grus npm...

Malicious code in cors-spinner-firebase-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d50d2148eb02e8dee26102481118cc6dce36328fb9fb1b5c7f2a72b52d384d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...