240 matches found
EUVD-2025-121827
Malicious code in spawn-io-cosmiconfig-jest npm...
EUVD-2025-123643
Malicious code in playwright-cosmiconfig-helios-jabbah npm...
EUVD-2025-123842
Malicious code in perseus-cosmiconfig-firebase-quark npm...
Malicious code in pino-cosmiconfig-eris-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93dd9d8fc57cb176b04e7b09587a7b5e36c2d4b77c0db76abb41f2fc0bf77da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120533
Malicious code in webpack-eridanus-iota-cosmiconfig npm...
MAL-2025-147512 Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887089f1756813ee1281c518b378e9496822a0ef1a84f21866e1cfaa764c8de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148505 Malicious code in telesto-webdriver-mocha-cosmiconfig-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 470bdd92dc331eb2038dedce586fd6ee3b993f2e59323484d130cae97a00686a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146944 Malicious code in quasar-cosmiconfig-async-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e76bb28548534fc01c9b0261f4267dbbec430eb9d246820b1104a172a156064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143028 Malicious code in gravity-pm2-cosmiconfig-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d5d825950e78fede990188d0828c15b780d15be9a2cbfdb65192a4e13a6186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141190 Malicious code in cosmiconfig-neptune-public-luna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe4928a1a9940219865f50a24366f38c974d857bff1aed36844629daf22054f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141182 Malicious code in cosmiconfig-gemini-wolf-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3bd12bb3be8b01b050f726a8cd093fee2c9c5ad5226ec9d820cc45f66dbdc44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145155 Malicious code in mongoose-javascript-cosmiconfig-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0460219f1419054f30e265dadd5b11cfe5e7dd6e47ccaa607a01958dc356c40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141657 Malicious code in docusaurus-cosmiconfig-fomalhaut-firebase (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48320ffdb95d1b543c27168dccd5a5eb028beb17f1215e1de83ec2140b407d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143057 Malicious code in grunt-cosmiconfig-inquirer-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0b021a09de30d4b323ddd5aae4aff53aaf7dca04abdda73e5418cbb0514921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148098 Malicious code in spawn-io-cosmiconfig-jest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e6b201351a9a51dd4418072852271e69f95ab27e86b442ea8598d9ae40f2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146079 Malicious code in perseus-cosmiconfig-firebase-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e221b7d2beb77b6059c0e71a9fb1f02ee2fdfa97680094407cb6f1af94797df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146676 Malicious code in prompts-wasat-charon-cosmiconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8812a5f00b2abfe082d0356b8481321b48341d4051a93e24483b59a2c6ad66cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146827 Malicious code in pulsar-despina-apollo-cosmiconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8378b5877907e04eadc11e82025babd84f62bc8d563fe6c2c0ff3d55c0cc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...