232 matches found
EUVD-2025-121494
Malicious code in sync-telesto-configstore-javascript npm...
Malicious code in jest-hermes-configstore-supervisor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55cfe725d260f2ff8e857501ff3c86c3d6102de8a1412fb9208bb9189e66ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112144
Malicious code in json-configstore-venus-yakutsk npm...
EUVD-2025-120272
Malicious code in xenon-repository-radiant-configstore npm...
EUVD-2025-121702
Malicious code in sqlite-configstore-remark-vuetify npm...
MAL-2025-140716 Malicious code in chariklo-zenith-proxima-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d16309eec2c4b68c617d8e3add8ee19c0b69ec68801ac360a1206f5773a74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115388
Malicious code in charon-configstore-polaris-dependencies npm...
Malicious code in build-configstore-kronos-dynamo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6152d31759998ec7f7ff0c7f7625b2df797123c6f92b91550da3d5be8bc0cbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bootstrap-wezen-selenium-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba700325c0ec38a68b85c35f22e10add36f7773904e951906f066fd96e60c3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in configstore-fusion-mensa-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7480df2dc25d9a8f8ba0219587f72f5d1ac90ff210e0c0459f96e3fbbebb3052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aldebaran-celeste-fusion-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d449687758ea4d1616ccba7f7691ab128718236e5a1964552aa9a1764a7dca3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116220
Malicious code in backend-configstore-node-sass-firebase npm...
EUVD-2025-115063
Malicious code in configstore-callback-redis-gemini npm...
EUVD-2025-115051
Malicious code in configstore-markdown-convict-auth0 npm...
MAL-2025-144963 Malicious code in middleware-postcss-loader-vulcan-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146363 Malicious code in polaris-repository-ignite-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae54010ef3eed19bcf96488eff384a8b20c5631c658cf381d8e92f2484cdaff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145111 Malicious code in module-nestjs-convict-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0597fa9a588ae3af2a54589c51cad71f570903d12c726485ea45874f01d571b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148181 Malicious code in spica-terser-configstore-taurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18813c3e1ff9705d5e8cc26b5c1dbbcfc10f8bda51eec707edc856eeba57da51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146420 Malicious code in postcss-protractor-karma-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16675a33058376a90e011bd1d015a37a8d8b845bea120f47975b1d70153514a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...