5914 matches found
MAL-2025-140667 Malicious code in changelog-cosmos-sync-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596a89477e8326b81d0f5d1350fde952cd637ffe72226471a186f3f7cd3fe4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nebula-mdx-polaris-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b597abbb8f843368a4693e7ff646c15e6d201318b0ac904a36d5fd327456cd0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141159 Malicious code in corvus-luna-chromedriver-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc57845ad897dab7e51dc698f8f4a85f4640e5b4759380e4673f476f8d7a59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145060 Malicious code in miranda-sync-despina-auth0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddac1488fe65453e57b62caf85d562e3e2b5eda8fc296fa78fca7fd5046bbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149339 Malicious code in webdriver-manager-yakutsk-meteor-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875fff606ab52451855235f1681354d08bcefb6c29a25fd69abbfd5a0fdd9a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139647 Malicious code in atlas-karma-sync-galaxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3aba52d0957eacf7f9cb58860dcaaebcd83e86487cc6f8cf730279da91a6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123174
Malicious code in proxima-vortex-buffer-sync npm...
EUVD-2025-121712
Malicious code in spinner-uglify-js-sequelize-sync npm...
EUVD-2025-122463
Malicious code in rimraf-sync-koa-test npm...
EUVD-2025-120510
Malicious code in websockets-dactyl-element-ui-sync npm...
EUVD-2025-116455
Malicious code in atlas-karma-sync-galaxy npm...
EUVD-2025-120590
Malicious code in webdriver-manager-yakutsk-meteor-sync npm...
EUVD-2025-122608
Malicious code in request-sync-magellan-loopback npm...
EUVD-2025-121494
Malicious code in sync-telesto-configstore-javascript npm...
EUVD-2025-121928
Malicious code in slides-supervisor-apollo-sync npm...
EUVD-2025-112527
Malicious code in ini-delphinus-fetch-sync npm...
EUVD-2025-121504
Malicious code in sync-jasmine-elara-mensa npm...
EUVD-2025-123548
Malicious code in polaris-sync-procyon-sagitta npm...