407 matches found
EUVD-2025-120387
Malicious code in wolf-comet-fetch-aether npm...
EUVD-2025-111761
Malicious code in levels-comet-axios-rate-limiter npm...
EUVD-2025-114424
Malicious code in dorado-comet-cypress-ursa npm...
MAL-2025-140411 Malicious code in carina-impulse-slidev-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ae1f871514ee10efacea0fa8c481ee0c8e1e234293b01a5215f6c2c8d3e048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142783 Malicious code in gacrux-style-loader-cache-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d40fb9bebd1cbc783338d691aedf1b17a93524a2990ac15451501b00098fb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146829 Malicious code in pulsar-envconfig-nuxtjs-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5761e39a013fd801c9b8b331b1236d5d62883889f8f9ea1c653bea70859836e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145621 Malicious code in non-blocking-sqlite-comet-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4565c829ba2e5b0b1cab2a792e2ee7ab03d4a61f041503d12bef51bd72b837f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140874 Malicious code in comet-event-husky-typeorm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d106946017d4e4f863622b3e6fabb769bf7517907828720446c9f69f07e589a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142468 Malicious code in figures-halley-cygnus-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bfdd47cd57e9ec30a9e0daefae6dced0d48b8bcdec9c70ebcd41b4bf6f3247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140336 Malicious code in callisto-jsonp-avior-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908f11f5f4c7839935f96d8f7d7c73ab4922cf0177174f9d9d4877093b50f428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141075 Malicious code in convict-hercules-comet-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5786dc2bd60bfdccbe5e268b683b5b9c3f489b85c479fa537c5154dedf4949d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141687 Malicious code in dorado-halley-comet-dynamo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61971e696f00e0b15ae7dbd87ae429aed772439dfcd64995928df915731a459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143044 Malicious code in gridsome-hapi-comet-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd3cac8edaa9ec5304601d2065302dc6a788f5a38d89ce31ff3053d2f348b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148237 Malicious code in sqlite-release-it-markdown-pdf-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842ed031476eaff919d2d36c6140df2eafe2aeee5855db59ed82f3128eebfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147364 Malicious code in rest-rimraf-auth0-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308cc6969d5c0fd9d5fb4f300fda62ca7b42b335cd50278fad17ece90c2621cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144762 Malicious code in mdx-comet-vortex-karma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147012 Malicious code in radiant-comet-module-gulp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b564dfdedf86f43133b6b49d91c9d6a147c38582bf8da887f6659f1c566f0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious Perplexity Comet Browser Download Ads Push Malware Via Google
Attackers are exploiting Google Ads with fake Comet Browser download links to spread malware disguised as Perplexity’s official installer. The campaign, tracked by DataDome, has ties to DarkGate...