3627 matches found
MAL-2025-148161 Malicious code in spica-eris-spica-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144247 Malicious code in lacerta-middleware-procyon-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b28da3265a24a7bcce4680ed10ee0d5aa21f933a37897e5c22f5b5203a960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122555
Malicious code in rest-sqlite-exec-hugo npm...
EUVD-2025-122575
Malicious code in rest-exec-graphql-algol npm...
EUVD-2025-116274
Malicious code in axios-exec-umbriel-meteor npm...
EUVD-2025-113773
Malicious code in exec-changelog-upgrade-antares npm...
EUVD-2025-120830
Malicious code in vega-supervisor-exec-taurus npm...
Malicious code in await-proxima-mui-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d650a20b5908dc81ddf5fe514abf51c8ed0990e33cfb1fe510b4db247ea4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116822
Malicious code in aldebaran-grus-playwright-exec npm...
Malicious code in spica-eris-spica-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dorado-chalk-canopus-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9780f97be9dad27f3d893ac69914d86d4366e962fcb1202373b7f0fab22d148d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124743
Malicious code in morgan-exec-uninstall-janus npm...
EUVD-2025-116298
Malicious code in await-proxima-mui-exec npm...
EUVD-2025-113764
Malicious code in exec-jekyll-redis-apollo npm...
EUVD-2025-121669
Malicious code in standard-markdown-pdf-lyra-exec npm...
EUVD-2025-112908
Malicious code in heka-exec-terser-webpack-plugin-start npm...
EUVD-2025-113754
Malicious code in exec-nuxtjs-async-await npm...
EUVD-2025-114425
Malicious code in dorado-chalk-canopus-exec npm...