17617 matches found
Malicious code in foundation-node-config-farout-bunyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3793dd3ff731c5c1110f0f04402bcb024a4a5017e8a91628e170d29b6403c4d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in supervisor-config-hapi-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3204291ed7b322002b6447d22612949989d91607e7eab0d2045e2f8adc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176844
Malicious code in quasar-helmet-metabolomics-node-config npm...
MAL-2025-187068 Malicious code in fusion-proxima-miranda-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e21e8752ee74daf7f8f21ad711068d8372a0a3106657d79aad34558a9cebac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179049
Malicious code in eslint-config-apex-hermes-zooarchaeology npm...
Malicious code in eslint-config-apex-hermes-zooarchaeology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73ba82f9d9c22e1bde2447c605b7f915aaa35732f226fb83172e499f027a621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hermes-config-unuk-aurora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be45cfa8332efa48889c39ea7acf947b99ce9fc254f407db0c6e462ae8de03c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176270
Malicious code in spectron-config-cluster-command npm...
EUVD-2025-179864
Malicious code in castor-andromeda-izar-config npm...
EUVD-2025-178613
Malicious code in halley-pm2-semantic-ui-commitlint-config-angular npm...
EUVD-2025-177312
Malicious code in parsec-oauth-jsonp-eslint-config npm...
EUVD-2025-179630
Malicious code in commitlint-config-angular-nodejs-carpo-vortex npm...
EUVD-2025-178033
Malicious code in loglevel-exobiology-eslint-config-rate-limiter npm...
EUVD-2025-176856
Malicious code in quark-eslint-config-materialize-css-loader npm...
MAL-2025-187120 Malicious code in gatsby-config-postgres-concurrently (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da39a9e2fd7a04f5eb662fb6eef0160a78e4ec3832a4537c9e704e0731297736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185717 Malicious code in babel-babel-config-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e59f0ddc5f47202e4b411392aa267a1343447c1668f653954d176f31867bc07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188309 Malicious code in node-config-phoenix-regulus-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d81c361ada3f219c47cdd46b1840251c77fe413829cd1bb0a4c630ac731f915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in commitlint-config-angular-hercules-express-yonder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddef34412e83c0fbe8a9644690f235972b287dd6c6f27c8589726648b3334e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188306 Malicious code in node-config-hexo-version-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9b65b9b8c11b124be12acd58301b389aedba3ac28ad6ab66fcf6f4ac2a0a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...