9821 matches found
Malicious code in sirius-development-gemini-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e955a5191c86c0569fc6fc59e5066668be1770cfc264f30ce9c384c7aa39560f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124461
Malicious code in nightwatch-cosmiconfig-semantic-ui-development npm...
EUVD-2025-114474
Malicious code in development-taurus-slidev-deneb npm...
EUVD-2025-114483
Malicious code in development-nova-carpo-quark npm...
EUVD-2025-112797
Malicious code in hermes-development-virgo-promise npm...
MAL-2025-146370 Malicious code in polaris-spectron-webdriver-development-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b97c61b120b0d11484dbe757f30da970c4faf2ded6606a69162f1d6f7b2213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122693
Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development npm...
MAL-2025-141640 Malicious code in development-xo-pegasus-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96b3a002fd84313582346e0279eb4c4b80b80e4021e090a04a37692156c7d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120789
Malicious code in version-mdx-development-delphinus npm...
EUVD-2025-114116
Malicious code in eleventy-development-tailwindcss-aether npm...
EUVD-2025-114482
Malicious code in development-polaris-lint-staged-procyon npm...
EUVD-2025-123686
Malicious code in pino-pretty-husky-development-deimos npm...
MAL-2025-143314 Malicious code in hermes-development-browserify-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603d2d8cb661d4bfb2a2f0cae3ab47d384a2ec9b7bd2980e68a0ee846b0d175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114490
Malicious code in development-dotenv-pyxis-ariel npm...
EUVD-2025-114477
Malicious code in development-server-electron-builder-hermes npm...
EUVD-2025-112143
Malicious code in json-development-publish-terser-webpack-plugin npm...
Malicious code in configstore-enif-development-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18867f5616affb9421d74ecd880425debcb7b7e0fc1670211003ddec8dc395d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141625 Malicious code in development-mui-avior-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847441eefbf7f87609313b98589bff9e11ed701a7d8cef315a07e5b6dc2f7cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141748 Malicious code in dotenv-safe-development-command-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c16cfd842e8cb52469e8ea8f152f3e7626745060a732985a6a98d9c59f8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...