EUVD-2025-112599

Malicious code in ignite-foundation-cluster-spinner npm...

EUVD-2025-116433

Malicious code in atlas-yonder-carina-spinner npm...

EUVD-2025-121735

Malicious code in spinner-dagda-xml-public npm...

EUVD-2025-121745

Malicious code in spica-spinner-rimraf-process npm...

EUVD-2025-121731

Malicious code in spinner-envconfig-regulus-readable npm...

Malicious code in rest-arcturus-io-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d0b8686eed7092e318656016dd7a3307ce443b16ea6fab1ef179d685a0e7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122930

Malicious code in quito-firebase-supervisor-spinner npm...

EUVD-2025-121739

Malicious code in spinner-build-castor-hermes npm...

EUVD-2025-114043

Malicious code in enif-xanthus-spinner-run-script npm...

EUVD-2025-121711

Malicious code in spinner-venus-izar-vortex npm...

Malicious code in materialize-spinner-superagent-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c569a14bb5035377c221313c418b1c79724b1e26641bc2a9027efc4adbde6eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121737

Malicious code in spinner-commitlint-wezen-gulp npm...

EUVD-2025-114089

Malicious code in enceladus-auriga-janus-spinner npm...

EUVD-2025-124546

Malicious code in neptune-playwright-spinner-charon npm...

EUVD-2025-121303

Malicious code in tethys-non-blocking-hexo-spinner npm...

EUVD-2025-112923

Malicious code in hapi-markdown-dotenv-spinner npm...

Malicious code in spinner-envconfig-regulus-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3094685581e8535286d53ba4a65d093b12a027d9f305edb393fc8e9a267df3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123866

Malicious code in pegasus-spinner-google-cache npm...

MAL-2025-143189 Malicious code in hapi-markdown-dotenv-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3293fb2ca9b432971d77bf3217d2e02ba442d2f5f05ff47e51ef92b2ca63b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148199 Malicious code in spinner-hydra-mocha-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef413f567ba077fea84d7d2996097ce31721cd68e7bf89ed81889d68c55bf1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...