4746 matches found
MAL-2025-149479 Malicious code in winston-bellatrix-cosmiconfig-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bfc0a9d123c2f0452947c5293ca68f12066d3aed35fc561a356882b87baba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142701 Malicious code in frontend-chakra-ui-standard-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520d1091a873c4269619f99e8e6a1a7b3b45d36e1ade66d7ba940a0be49c292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143696 Malicious code in io-frontend-jasmine-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308e04cfe0933e6fc4337e749c10f0c0bd6ba52fd5827d1fbce22de7792638b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140414 Malicious code in carina-mdx-xerxes-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd044204a95843e7083af4777aecd655a9d9ac6d2120c78c235ae0164b0c172c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139789 Malicious code in avior-upgrade-frontend-yonder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82629c5437f4b0d4c89ab021f789b978e879e95e377e702e4c55f994b4e888e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146232 Malicious code in pino-pretty-frontend-sqlite-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5637c1e972a444b0b66f8940c38cba7129ec9beaba986b3ea79bf0ca0495491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142715 Malicious code in frontend-pulsar-nuxtjs-request (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6273018e032c98dfefa980044a8e70889caebc56332360a580aac8f43fcb2ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in build-pino-pretty-frontend-rate-limiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136bd760b092d361738315dc7ba6e397b79b80fa76ad0d08a50c3c277bd10a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115917
Malicious code in build-pino-pretty-frontend-rate-limiter npm...
EUVD-2025-113394
Malicious code in frontend-vega-scripts-cli npm...
Malicious code in buffer-betelgeuse-frontend-rehype (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0ef4b2d71dd1d93e43bc2f987e0a94230df746070093c4bf07678a38085182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115358
Malicious code in child-process-init-winston-frontend npm...
EUVD-2025-120069
Malicious code in zenobia-bellatrix-gravity-frontend npm...
Malicious code in ini-draco-frontend-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9e64174e135c44aee880ca64de4b7d5765cb2dd9c6917bf4f952af0c5820e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113410
Malicious code in frontend-epimetheus-flare-lynx npm...
MAL-2025-142708 Malicious code in frontend-meissa-scripts-charon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7993005ccd89c0204660a1eabf207f62018f8177e86a80e44ab904f81bd861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144852 Malicious code in mensa-frontend-sedna-markdownlint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53665ead08c8ec17b51688daeced105daa9d1ac3f82de921c27b8b3a6d165b52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143647 Malicious code in inquirer-frontend-changelog-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c250a136f5d0990b830b851b42d887b841167f96ed2d9628e6dc86facc74ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...