263 matches found
MAL-2025-149208 Malicious code in vuetify-europa-rollup-cygnus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b971b635734164859f470126e1df9acbda4112807b2bcd956b710fd2280676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113834
Malicious code in europa-jwt-cygnus-npm npm...
EUVD-2025-114742
Malicious code in cygnus-heka-mensa-hermes npm...
EUVD-2025-112996
Malicious code in gulp-iota-sass-loader-cygnus npm...
Malicious code in cygnus-publish-apollo-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c03f11a829c2bc6b90dbf8fccd6788100da66f690ac6c5aae274f08fbe6bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114746
Malicious code in cygnus-avior-perseus-auth0 npm...
EUVD-2025-114740
Malicious code in cygnus-html-webpack-plugin-convict-sagitta npm...
Malicious code in triton-scripts-cygnus-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fc611d6b7568136f908c9acb21ec7354043b45aff46b45717181224ee13010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cygnus-schema-pino-playwright (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dadfaf6400f24675483af5af45b3679d0f5854fdf0ffca88edf168e4aea9ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114729
Malicious code in cygnus-standard-apollo-mira npm...
EUVD-2025-112303
Malicious code in janus-firebase-postcss-loader-cygnus npm...
Malicious code in cygnus-html-webpack-plugin-convict-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a7c905e6d297a266e003ada74f2dd7959d66a6bba0eb74d4c082c443e0fdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cygnus-module-browserify-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825d606cbdefc2604cd66982e1a93ddffc1006cf27f427096225845d4e019fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cygnus-umbriel-inquirer-rollup (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0bf2ab43841e4c62581daea5b6a0f8e07b10b3a8a9717077ae93295ea710f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cygnus-zenobia-castor-release-it (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6fc83f9a9066367039fde3091f84f2dddbde9e9b230041941f6f04b3d02dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gulp-iota-sass-loader-cygnus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348f1372ca03ce7dde0184d8847197c18ff8c541c9c70bf0f2631bc74efac9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in resolvers-cygnus-subscription-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cef4304d5ae62ad5925a3d7772113cfab7f2f31222305bbb2d2f22097c3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in solis-sequelize-koa-cygnus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29e3e8c5a3977cec9560fe30b6c2fd0263b5738ea521484c63f631986c17a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...