50383 matches found
EUVD-2025-114826
Malicious code in csrf-fornax-xanthus-auth npm...
MAL-2025-139402 Malicious code in antares-csrf-ignite-bunyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfd3b91a49b333d4e3b551e825ad73ebabb48af5696ee496404e652d6a1ee9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143196 Malicious code in hapi-prompts-markdown-pdf-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70611763ec0820cf06f80352089a3d6edd38c7a1491891daf9f0bd9f35c623fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149126 Malicious code in venus-toml-google-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19275523c1ac90a3c78c796a3d6a693d61c37f1c6e132085aab050319a35dde7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141283 Malicious code in csrf-fornax-xanthus-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d696b9940240241efd098bdfb57e70794d34ea3aa153ce32674ce12d10a5db01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139570 Malicious code in arcturus-ignite-csrf-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e3b9ed32ae320ad1acddea3e3a6cbb09e432ca21542a11792b20e4b4eb6fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142927 Malicious code in global-csrf-xml-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a669302077b44dbbcb3bdfd3d6456495a67dbcffacbdef50b03e2fbf92f2b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142251 Malicious code in eslint-terser-webpack-plugin-nightwatch-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d7c459fe1fbf66aec4fc51d75472c90fe2821ff50683d8de793bf04121a83d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in backend-phenomic-csrf-auriga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42052997348b7f8d46c2e3b6c0dd0e87440a0ca439cbd7931bb5b4ae3fd164e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116208
Malicious code in backend-phenomic-csrf-auriga npm...
EUVD-2025-123798
Malicious code in perseus-vega-leda-csrf npm...
EUVD-2025-124707
Malicious code in mui-spectron-webdriver-csrf-apollo npm...
EUVD-2025-114323
Malicious code in dotenv-winston-yakutsk-csrf npm...
EUVD-2025-114818
Malicious code in csrf-nconf-halley-jest npm...
Malicious code in andromeda-csrf-got-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b156646e5ae6831d28447dfb85a6d23732f46c59aebb936a8622ec2da9d24ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122584
Malicious code in rest-altair-csrf-arcturus npm...
EUVD-2025-116700
Malicious code in antares-csrf-ignite-bunyan npm...
Malicious code in hexo-csrf-slides-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4060512652c1775f10dad8705e2c562273f340ce3d86a7b19b503e23e9b2928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in csrf-rollup-plugin-halley-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a977db3b3dbf4b1b095a2d908a80af0d5bdccdca17f16616ebd2c678ace149 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...