1401 matches found
Malicious code in dirty-amber-hookworm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daab4cd5ca2a405fefec1b3adc9a8ade665830f48143102387f51ce878a2903a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in scared-cyan-mouse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd731981856eb7bcea79bc3b2a4fb7994c201b1753ddb60ca9fc9236bb7d6a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69755 Malicious code in organisational-lavender-cod (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd93ee8c8afa4a90c3103cc66199fc287ceac743f48f2023f3456b126877a2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-67583 Malicious code in cultural-gray-angelfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc25dae8660556d4c4908cc03cfb116df7a8f3903e88b953d2a5ddce0c5da29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70506 Malicious code in select-blush-mouse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b671135ecbebe6e7cf26a80b8cbb062accab3fed19f57ca57c0584bf36871539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-69169 Malicious code in linguistic-aquamarine-stoat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1584212400403401421e2f180663f071ae80d2047515ae3442455f71d90e18f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70831 Malicious code in statutory-coffee-snail (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452ef6c46a3f79bf07cd11839b275f918df52ea9ab673670f42d3fb57242dfda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in convenient-orange-aphid (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81144cf58581c84d2a615fc0b3466e16fc89452f8ace46139c0299f887c61e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-68032 Malicious code in encouraging-maroon-wolf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92871f00ca29acf65d8e3b37e198171d49cfd66eccdcdc9e0f3247a5b10bf915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in reluctant-violet-peafowl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4762fb511aae892356962b25a26d3fd9694fa4eb75634f40ee686060e23bf713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in technological-cyan-kiwi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 487d318366649ed76d5cc8596e8e1f55134125b6b58c116e0ea6979c04b3d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rude-tan-wolf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765ec296952f476fd14566f1d9ccdcf4691d71a42ea979e4bb1f944ad7c9b257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in many-cyan-swordfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4348f2f1ec8d25e4bec5fe6f0590a23cf17ed966f66f513efc0170a3e8700a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mid-yellow-wildebeest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfb159ab792c2e0a585ba737c2d600c55893c30bee24fe755c371ae55b828a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70737 Malicious code in sowravyt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf552059b71a4919fee3126b1563bb0b026350863c16f8f3a08d0950ad17607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70133 Malicious code in quick-coral-pig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6c7b11baa470ef145ea756e8c3931c824ff7bf8dc8e4c4e4cdd3d71f669dd83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70113 Malicious code in puzzled-beige-flyingfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cece956b614c352b0c9d005a66707ea6e0c0bdcab7a4ea32c23fd247e2e42829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Regular Expression Denial Of Service (ReDoS)
Transformers is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to inefficient handling of numeric strings in the normalizenumbers method of the EnglishNormalizer class, which allows an attacker to exploit crafted input with long digit sequences to cause excessi...
