451 matches found
MAL-2025-143255 Malicious code in helmet-mui-eslint-plugin-webdriver-mocha (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a3ecfc9ebd051b1684c5e2b349a06ee960d316c0caadbaed438ddd4fc9bd863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143605 Malicious code in ini-rigel-framework-helmet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e6a460eaceaef16c9333b123fd0edda2d6049e201f24ea333cd2252d55a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149015 Malicious code in upgrade-helmet-zenith-geckodriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029323854f25d0b890fc15cdfed960fa871990c4eeb799297344b79d60c6b465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149861 Malicious code in zenith-tailwindcss-helmet-carina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ac99628cc463df34bb5966523d40dedafbd2d76d2036558ffc840d3397455e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141207 Malicious code in cosmos-helmet-grus-cross-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0832fade9a9296d4f2dfcbccf8d7199ad9b8487cba5e1383233e5c5b44abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143261 Malicious code in helmet-rate-limiter-superagent-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ef1f11565aefa5ef4b769785a04189915aa6acbcbe8bc7e233fc7c62924926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141797 Malicious code in draco-tailwindcss-helmet-yakutsk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8d7941f34ed14c6cb23f0f0ec0dec198e240f770b1788b17d88201f1fb16b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148652 Malicious code in thuban-gemini-warp-helmet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053181b6ef8d4f7582c97fb9eedaae20888f1ba3d215dbe01398d3b7c6460911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143259 Malicious code in helmet-postgres-semantic-ui-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1806fa3dd985b486547323fc55566005a0acd0adf10474256d4e0bf9909d94f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140567 Malicious code in ceres-helmet-wezen-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf466b18144d7948c134657b443b0a30c97b236683cb3ce5a18e23c2157c857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143256 Malicious code in helmet-mysql-auriga-elektra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb083d543cb2b32e10d866fd5f088b1cc67195da82893e307ebea62ffee3a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious Package
Overview http-helmet is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...
EUVD-2022-48958
Malicious code in bioql PyPI...
EUVD-2022-48961
Malicious code in bioql PyPI...
EUVD-2022-48955
Malicious code in bioql PyPI...
EUVD-2022-48963
Malicious code in bioql PyPI...
EUVD-2022-49726
Malicious code in bioql PyPI...
EUVD-2022-49728
Malicious code in bioql PyPI...