240 matches found
Malicious code in cosmiconfig-convict-despina-nuxtjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4641d82903a6b267b849579cbabf0ddeba17d40fa468be2cceeadf773543f2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141173 Malicious code in cosmiconfig-await-cressida-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd2568a507aef1951ff5eedd43bdd5b0ec74acef3c09457d804ff29fed8d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143133 Malicious code in halley-cosmiconfig-nodejs-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dade96fb0e2431b0716ce1e1641fac7e05a2a2cad951c5e33772fc3cec2128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141177 Malicious code in cosmiconfig-cressida-style-loader-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94271e0ad39049b5652876cee88d242361da4605c8f8899fd662c77483075950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144356 Malicious code in levels-markdown-cli-cosmiconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91e420dffdd3b632425f0ab36ce3acc96e1a91ca101b3bf8e554a24c98aa932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141180 Malicious code in cosmiconfig-firebase-warp-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123709
Malicious code in pino-cosmiconfig-eris-perseus npm...
EUVD-2025-124485
Malicious code in nightmare-event-blitz-cosmiconfig npm...
MAL-2025-141189 Malicious code in cosmiconfig-mongoose-nuxtjs-eridanus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fe186353e91bca7c86ea450985eea3716d9b31f8f7cdbbb52226081c9bf0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139931 Malicious code in bellatrix-cosmiconfig-axios-polaris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a04c21a6b3d09e342cff07e11c6ee102c77d1794b9495cf445dca7e2054fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141197 Malicious code in cosmiconfig-tethys-jwt-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2235d0c5899049d55e6f77b9f13f4d8ed47d5c14d47cdde986b99661b00ba342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141187 Malicious code in cosmiconfig-mocha-mdx-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e6409a70557c88c22b300d1eef3de7cac56caeb40ddfd9f8c457ffa474cb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148541 Malicious code in terser-ursa-cosmiconfig-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6488da569c06a27b6cc352b7d86c2dd028c9e589293234b9019272e6a3c92805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145503 Malicious code in node-config-ariel-cosmiconfig-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511e6c9da4678fdbcc5910ed10531ec1bf199ca08705ff5cc0ffc8eacc6f05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148224 Malicious code in sqlite-cosmiconfig-passport-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac3c4fb6f1851d954cfaae38164bfeb87249be82f97d7e6ba1552473a461f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142443 Malicious code in fetch-event-cosmiconfig-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553b1de624bc1c101df86ed334fbb6c5575ad72d38d45302ba2c4709aff2df39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141183 Malicious code in cosmiconfig-google-commitlint-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5303ac34568afd9d8aad8925792f46105495a3425088872248b60bec7cd2432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114919
Malicious code in cosmiconfig-neptune-public-luna npm...