165 matches found
Malicious code in icy-black-goose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52506c0ffeb3b00f0a77c12a8ae7e3553a0a580af67cc9a0e2df1580f1b7b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52437
Malicious code in ready-black-goose npm...
EUVD-2025-50935
Malicious code in yearning-tan-goose npm...
EUVD-2025-51841
Malicious code in squealing-crimson-goose npm...
EUVD-2025-54709
Malicious code in educational-emerald-goose npm...
EUVD-2025-55539
Malicious code in capitalist-aqua-goose npm...
EUVD-2025-53892
Malicious code in icy-black-goose npm...
EUVD-2025-53835
Malicious code in impressive-red-goose npm...
MAL-2025-67940 Malicious code in educational-emerald-goose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1bd787f810b72f5d61d02203b90aa10ec3f6ff1dc6f19f0a592f73b808ae4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-71714 Malicious code in yearning-tan-goose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939895f525edebadeb7a05e19bf7ec496ae88a254fca3775e00fb49ca8f4beaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in yearning-tan-goose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939895f525edebadeb7a05e19bf7ec496ae88a254fca3775e00fb49ca8f4beaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52406
Malicious code in redundant-apricot-goose npm...
EUVD-2025-51760
Malicious code in striped-scarlet-goose npm...
EUVD-2025-51349
Malicious code in uninterested-jade-goose npm...
Malicious code in striped-scarlet-goose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a787a63e76d246ed55b83dfaad2a5916c6d804d0c6184ecabe449d0de19425f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55262
Malicious code in concerned-aquamarine-goose npm...
EUVD-2025-54052
Malicious code in gross-scarlet-goose npm...
EUVD-2025-51459
Malicious code in tricky-purple-goose npm...