347 matches found
MAL-2025-68643 Malicious code in harsh-crimson-cod (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd47c76fc761b49cbbd6613cb18cca3aa62bce7b032f13866b0c33e0059720be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-68487 Malicious code in fuzzy-crimson-egret (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45faf01aa96783107f47feb3d9115d2e0bae5156194bede1f082e5bd5ac0f4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70014 Malicious code in printed-crimson-opossum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49adafea95efaa95f6f982fbd5768969a0e70caa3bbb73e79ee046bb75460194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69087 Malicious code in left-crimson-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a9550de263b531af8c61719962971c817c475abf46cdd93385ba246d719fcfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70720 Malicious code in sore-crimson-capybara (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3de034b20a6e5ba4a2c6e29bec9c51e42f5440f1b0870ff24a93a60fdab7e8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69670 Malicious code in objective-crimson-bat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340228612a7f42a4040459727fcb3d327eeb92bf742d4dde99bfbb9684241cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54814
Malicious code in domestic-crimson-chameleon npm...
EUVD-2025-54395
Malicious code in fashionable-crimson-scorpion npm...
EUVD-2025-54813
Malicious code in domestic-crimson-tarantula npm...
EUVD-2025-54743
Malicious code in dying-crimson-jellyfish npm...
EUVD-2025-54674
Malicious code in eldest-crimson-ptarmigan npm...
Malicious code in shaky-crimson-mouse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e683dc73ba5a235a1a5aadf83c393051600975edb16f720a3f1df8d349814b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55082
Malicious code in crude-crimson-mollusk npm...
Malicious code in tory-crimson-otter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 515ca4922998183fa450915085f19df4aefd583060164bc2a4bc4826ef23fd44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aesthetic-crimson-cat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499b3904a34213603d20a55fe89e6b36b321407edbbc5a70c7f8fefd1cb2a102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-54716
Malicious code in economic-crimson-tortoise npm...
EUVD-2025-53704
Malicious code in intensive-crimson-finch npm...
EUVD-2025-55425
Malicious code in clever-crimson-iguana npm...
Malicious code in melodic-crimson-koi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9565d2c815c154dde1ea261d49816bbd8e859048378bd83a2c020604c2c7147b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...