8971 matches found
MAL-2025-141640 Malicious code in development-xo-pegasus-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96b3a002fd84313582346e0279eb4c4b80b80e4021e090a04a37692156c7d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141748 Malicious code in dotenv-safe-development-command-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c16cfd842e8cb52469e8ea8f152f3e7626745060a732985a6a98d9c59f8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in await-dynamo-europa-development (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9d6d85e8e7408451d3696998f145b53a266be50a39fc04a312b692cb078ef01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143314 Malicious code in hermes-development-browserify-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603d2d8cb661d4bfb2a2f0cae3ab47d384a2ec9b7bd2980e68a0ee846b0d175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141619 Malicious code in development-dotenv-pyxis-ariel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae211171bc2d9b5f0fe3cc61c3f814bb976c29080a1cef7a633af982f93147be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123586
Malicious code in polaris-development-subscription-eridanus npm...
Malicious code in spinner-development-cassini-umbriel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1980e9d652b81daeb875482c3bb1b2e296302bf80c17586a0b77dd834e11825d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115341
Malicious code in chromedriver-development-meissa-telesto npm...
EUVD-2025-124327
Malicious code in nodemon-scorpius-ignite-development npm...
EUVD-2025-121734
Malicious code in spinner-development-cassini-umbriel npm...
EUVD-2025-121900
Malicious code in soap-lacerta-development-element-ui npm...
EUVD-2025-114474
Malicious code in development-taurus-slidev-deneb npm...
EUVD-2025-115588
Malicious code in celeste-pavo-sagitta-development npm...
EUVD-2025-113053
Malicious code in grunt-development-postcss-loader-hydra npm...
EUVD-2025-123686
Malicious code in pino-pretty-husky-development-deimos npm...
EUVD-2025-114480
Malicious code in development-remark-impulse-hermes npm...
EUVD-2025-120838
Malicious code in vega-io-prettier-stylelint-development npm...
EUVD-2025-122714
Malicious code in relay-relay-development-warp npm...