347 matches found
EUVD-2025-115995
Malicious code in bootstrap-hugo-altair-rehype npm...
EUVD-2025-114713
Malicious code in cypress-cressida-altair-odin npm...
Malicious code in rest-altair-csrf-arcturus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10d12f9c3117cd64df99f3421c074d81f3494830740d567162b1decb6a9b9850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121316
Malicious code in tethys-canopus-altair-docusaurus npm...
EUVD-2025-116742
Malicious code in altair-promise-castor-heka npm...
EUVD-2025-116733
Malicious code in altair-tool-async-passport npm...
EUVD-2025-124045
Malicious code in ora-altair-vega-selenium npm...
MAL-2025-139348 Malicious code in altair-chai-transform-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e57b70246ceb72a49720b47e3ecfd3567bcccae73b01aba9d723cd8ba9b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147481 Malicious code in rocket-socketio-altair-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acdf43b480a5a806a64b8c6127b929eefaf3e68aaae5dc0fefa14aa5fa3888ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139345 Malicious code in altair-airbnb-graphql-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c76d50832dc7ab98677387bda1e24e8e43a74397e6dc03c9b59ea52ff4393cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124078
Malicious code in ophiuchus-spawn-altair-terser npm...
EUVD-2025-115046
Malicious code in configstore-rollup-nconf-altair npm...
EUVD-2025-120621
Malicious code in webdriver-manager-altair-chromedriver-express npm...
MAL-2025-143955 Malicious code in jovian-native-google-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18c92729ce788c0306a566215970143f0eef297f78f5ca7f805ea1ab316e072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139364 Malicious code in altair-rollup-plugin-jasmine-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7625cc7f00ba415476d51028456721c1a2a9a528a58a856ed80654906ce82da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139356 Malicious code in altair-native-webpack-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6e8418410495e7c4931b3bc647585fd4725d643d2d254e395837c0b1b7288a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140181 Malicious code in build-altair-winston-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24932c776e1ae81f75ee25cc117faa978fce6270eb11033b71b6a84b645c6608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139793 Malicious code in await-altair-got-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a660fc5e738c8d00b5f3881d89852c995e28e12b38ece3a1ead965d679ec57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in winston-heka-loglevel-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b653b39fbd93175eb9c58fed17b6c446545000911327d49ec037d7485efa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...