2694 matches found
EUVD-2025-124870
Malicious code in miranda-polaris-async-magellan npm...
EUVD-2025-120345
Malicious code in xanadu-async-prompts-stop npm...
EUVD-2025-120188
Malicious code in xo-async-less-dorado npm...
Malicious code in repository-dependencies-hydra-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e75f6ee4236a3b8223e7f6c412df1726c301ecb388a8fcf047e23cf9e30d792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149670 Malicious code in xenon-virgo-dynamo-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87eea9ee7c4835c97d54d39ce1047878a38e683a60c2b71b75c36cd92504fb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141264 Malicious code in cross-env-pegasus-async-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a6a5d9de5d3e6171d01a2b039e57bcc853f57222af8a5c94eaf0f922621903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146944 Malicious code in quasar-cosmiconfig-async-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e76bb28548534fc01c9b0261f4267dbbec430eb9d246820b1104a172a156064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146529 Malicious code in private-apex-async-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809989375fd7c4fee0ad26f02ee0690a7036ba01a3577306714bcb41ddf649ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143024 Malicious code in gravity-flare-async-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afaee9c4dea8100f153b287b329c31392a468c2d17a4394f167daf28eee72e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142584 Malicious code in fork-csv-standard-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144214 Malicious code in kronos-async-library-io (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6bee7aa7b2d9c88f44508041512b5125621a3086325c536cd05f9df907abd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141889 Malicious code in elara-style-loader-comet-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab4c1c4efa7b3926279345b2e9565aada7886b972c1b9b8ce7413517ab3c5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in xo-async-less-dorado (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd699bec9ea713703814b65c3d925c90e38c7b5078f81289df60659781069fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in parcel-async-ophiuchus-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111118
Malicious code in mini-css-extract-plugin-taurus-kastra-async npm...
EUVD-2025-120833
Malicious code in vega-pino-async-xenon npm...
EUVD-2025-116136
Malicious code in betelgeuse-apex-async-parcel npm...
Malicious code in bellatrix-async-yildun-morgan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf94953e1f164d925137c34e16b94d8edaa0cd00ff42194777b4f06ac661267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...