3627 matches found
MAL-2025-144247 Malicious code in lacerta-middleware-procyon-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b28da3265a24a7bcce4680ed10ee0d5aa21f933a37897e5c22f5b5203a960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148161 Malicious code in spica-eris-spica-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114425
Malicious code in dorado-chalk-canopus-exec npm...
EUVD-2025-112582
Malicious code in ignite-terser-semantic-release-exec npm...
EUVD-2025-123454
Malicious code in prettier-fornax-exec-halley npm...
MAL-2025-142361 Malicious code in exec-scorpius-toml-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daf0e843578606a660a5a5683f1243e6794785cedd068b8403e79e4357aa2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spica-eris-spica-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124743
Malicious code in morgan-exec-uninstall-janus npm...
Malicious code in dorado-chalk-canopus-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9780f97be9dad27f3d893ac69914d86d4366e962fcb1202373b7f0fab22d148d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in magellan-elara-galaxy-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecc1f280efec6e223c5ae6de10a1150bed55d41918ceafc38f2c3c28c88a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112908
Malicious code in heka-exec-terser-webpack-plugin-start npm...
EUVD-2025-116298
Malicious code in await-proxima-mui-exec npm...
EUVD-2025-113754
Malicious code in exec-nuxtjs-async-await npm...
EUVD-2025-113747
Malicious code in exec-winston-loop-nightwatch npm...
EUVD-2025-121841
Malicious code in solis-repository-envconfig-exec npm...
EUVD-2025-121669
Malicious code in standard-markdown-pdf-lyra-exec npm...
EUVD-2025-116274
Malicious code in axios-exec-umbriel-meteor npm...
EUVD-2025-121460
Malicious code in taurus-exec-javascript-repository npm...