3770 matches found
Malicious code in dia-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ace05da76ee6137520277d1359ec38173497c04ac97a43a38e1e69b06e0c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hafiz-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9b3bc91d824dcf8883b0f56f93895cbd9feebe6985d3973ac1794f28ce1b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ruji-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87eb33224d3ba9a3ecc741d6ab47b84414f4bc5387123ab7de5167b70947a260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ilop-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c01a0c6d868f7da648c41d256781344bddcc3be5ed366d3546015ac39dc5fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
siddheshtea (=1.1.6) potentially affected by unknown CVE via aji-29 (=1.0.0)
aji-29 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-29 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152068...
Malicious code in ita-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02837453fc85346dc0fdb91f0c694c8f5c0a938be35503e2f10d904f2f20603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-156007 Malicious code in icha-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb526732d0b94da5f9e930efffc901fcf71dea8c0034d042eefc7be971a74be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in intan-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec4b14b994eadc614e5408c245842d42781b2a0b73c649ef4b027170b5ce970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in billa-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8099027c4d18520221b2b2e1e22fb826406a7397d3bf20fee04ae2696182f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-155584 Malicious code in hafiz-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea9b3bc91d824dcf8883b0f56f93895cbd9feebe6985d3973ac1794f28ce1b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-156279 Malicious code in ilop-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c01a0c6d868f7da648c41d256781344bddcc3be5ed366d3546015ac39dc5fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-156538 Malicious code in intan-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec4b14b994eadc614e5408c245842d42781b2a0b73c649ef4b027170b5ce970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-170553 Malicious code in wulan-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c7575013590cf64fc252144dd7d1a54df30f2a517ad248a0fec6b8784dc02e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kentung-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f035d7fd539d2aeef5f9d3420b5ea3f0cfeb5bf7ba01981bd2a1321f86a9a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74708
Malicious code in elderlyxerinaeturquoise-29 npm...
EUVD-2025-74087
Malicious code in weeostrichmaroon-29 npm...
EUVD-2025-74595
Malicious code in grotesquecrocodileemerald-29 npm...
Malicious code in dark_chinchilla_indigo-29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9d5ba23ac756c5b1f8cb75ec10d20b3cc0f4f3b3aca2b06212946232aa6b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...