4279 matches found
EUVD-2025-146220
Malicious code in yuda-24 npm...
Malicious code in aji-24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c5db969213a8c84c67e3baa0096f578d79c1518fbaef0bc8a0b87d45d9ae56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
siddheshtea (1.1.6) potentially affected by unknown CVE via manda-24 (1.0.0)
manda-24 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-24 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159620...
MAL-2025-155579 Malicious code in hafiz-24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beed91a7fd7ec91f5221ca81ca07ed5c1f76814305b15c14dfadade8b68f4559 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-164894 Malicious code in rita-24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c3e2eeefa5891abe9869b0cd796d2ba1513db9e0e0456398227b031a0fe6878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-170548 Malicious code in wulan-24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32928c7a63337004d0ec01f604f6c7451ea7931ab9bdf9d1f9c3313735321383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-165249 Malicious code in ruji-24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0b2a143ecc2b027113c1a90e363f3236bc6448209ae08dde7ac4a953fb7b2c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-157504 Malicious code in kentung-24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde909ff96d2f5afc6572d147da91e7b050d351e148db7e9d90b7080635942e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74243
Malicious code in singlecarpsilver-24 npm...
EUVD-2025-74166
Malicious code in technologicalcicadascarlet-24 npm...
EUVD-2025-74812
Malicious code in communistgoatteal-24 npm...
EUVD-2025-74706
Malicious code in electoralcamelcopper-24 npm...
EUVD-2025-74560
Malicious code in hungrypikewhite-24 npm...
EUVD-2025-74510
Malicious code in juicydragonpeach-24 npm...
EUVD-2025-74907
Malicious code in adjacentvolesalmon-24 npm...
Malicious code in well_mosquito_blush-24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4ae7e7cde55e953eaa0772427b096c24fe582a1af4ba4b543c23640a40725e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77487
Malicious code in uncomfortableloonaqua-24 npm...
EUVD-2025-77470
Malicious code in wellmosquitoblush-24 npm...
Malicious code in present_quokka_emerald-24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790a7b165b69858a2610ec622de697492ba1949acfd6a76d0a50e47a69603bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
