1313 matches found
MAL-2025-143023 Malicious code in gravity-dotenv-safe-quark-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143018 Malicious code in gravity-bellatrix-farout-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840af6420f87daaf0dc5682a4ed0da2e4e51c0d3acc1380a1e56dd4d9ca2b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146144 Malicious code in phoebe-centaurus-pipe-gravity (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3a8c18f7ac238f1acacd09802476e050fd2c967e0bf88d0d81b6c9e94639a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144409 Malicious code in link-gravity-css-loader-arcturus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143027 Malicious code in gravity-jabbah-magellan-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5229ad0bb0abdb1698460191f585f244fb025a2accd69fcc65785d3005ed69d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116774
Malicious code in alphard-jupiter-yonder-gravity npm...
EUVD-2025-112040
Malicious code in jwt-foundation-kronos-gravity npm...
EUVD-2025-113088
Malicious code in gravity-flare-async-foundation npm...
Malicious code in rehype-auriga-google-gravity (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673cbf0729106f6a375f1483305e9e1799186f99e4954e4f043d47daf81b8445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in stop-polaris-gravity-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eba5f01f9a9e3d932f8d07a8043fff56153b5b693c9f0aa45bd3d51c997c687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123769
Malicious code in phoebe-gravity-pegasus-webdriver-mocha npm...
EUVD-2025-120306
Malicious code in xanthus-halley-gravity-mutation npm...
EUVD-2025-113087
Malicious code in gravity-got-xenos-css-minimizer-webpack-plugin npm...
Malicious code in vuepress-pegasus-gravity-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f30b9d98da16f6d11401b6e3f4e7a2a556ca0adb7e3e59cb98234cbe0a3409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113630
Malicious code in figures-scorpius-gravity-markdown-pdf npm...
EUVD-2025-122054
Malicious code in sequelize-gravity-jasmine-publish npm...
EUVD-2025-113080
Malicious code in gravity-xenos-postgres-concurrently npm...
EUVD-2025-116604
Malicious code in apollo-bunyan-gravity-altair npm...