28317 matches found
MAL-2025-146957 Malicious code in quasar-query-mongoose-alphard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5788a81fa1f290385db35fb12fe9885e283c9069d337479ea30915f15012fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122944
Malicious code in query-sirius-materialize-morgan npm...
EUVD-2025-122946
Malicious code in query-release-it-pulsar-nextjs npm...
EUVD-2025-123543
Malicious code in postcss-airbnb-query-start npm...
EUVD-2025-120230
Malicious code in xerxes-chromedriver-query-sedna npm...
EUVD-2025-120479
Malicious code in wezen-airbnb-query-dagda npm...
EUVD-2025-123309
Malicious code in procyon-query-chakra-ui-sirius npm...
Malicious code in query-despina-css-minimizer-webpack-plugin-juno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc52c97c1d959c25dca26780f72a3b65b73de4400a1ee0029b9df1206469a3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in carpo-tool-query-commitizen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d85076a23d978552389bda01ad653402407b5c31a5709662db6c7e2f7bf4acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112643
Malicious code in hyperion-dependencies-query-castor npm...
EUVD-2025-123917
Malicious code in pavo-nightwatch-electron-query npm...
EUVD-2025-123695
Malicious code in pino-mongodb-query-kaus npm...
Malicious code in pino-mongodb-query-kaus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60978187df58a76af8bf3bb453febdb1c26f374f6ca92ace9aab9eefbde3b201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in janus-query-lint-staged-celeste (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64ccedff80d3729b764e6faea457b0f2555770efa727b262d40f26ce5ebef01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120923
Malicious code in upgrade-centauri-query-rigel npm...
Malicious code in quasar-query-mongoose-alphard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca5788a81fa1f290385db35fb12fe9885e283c9069d337479ea30915f15012fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sadr-query-phoenix-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f920c6984fb239672b94fc29d9b92cf39958ef99654a15f50fd99e57f70399a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115032
Malicious code in convict-jsonp-query-castor npm...