5514 matches found
MAL-2025-146514 Malicious code in prettier-stylelint-odin-hexo-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b0d249f0e04a222afa4a1c8e67c735869b48c62e1d747d50ce0bf55860b905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143632 Malicious code in init-subscription-callisto-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9394c2bac5a142593132709358a31dad622842e119d03316c93ad3dbbabad6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140335 Malicious code in callisto-init-astro-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e7dee1332ca141e642cda2234291c22182742cb21c0c4340edc739302c351aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148173 Malicious code in spica-postcss-init-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0dd7516ab206c60ecc4fc90715916d1522813a27c6be01c8e4d65420b4f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eslint-gatsby-init-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2927981e2214a116cfa4d45c9f21260f04a036db99fe2eeedc2531cb6b09dc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112478
Malicious code in init-writable-pino-semantic-release npm...
EUVD-2025-115677
Malicious code in carpo-async-ganymede-init npm...
EUVD-2025-112500
Malicious code in init-antares-deneb-orbit npm...
EUVD-2025-122862
Malicious code in react-bootstrap-hapi-init-quantum npm...
EUVD-2025-112488
Malicious code in init-ignite-weywot-webpack npm...
Malicious code in telesto-wezen-mira-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c54640330a7c458d507a8b7649de4017b059ecab3bba9f5938aeb85fce4cf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in electron-init-vulcan-wolf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c5e6f24339422a4e699c277728da0d25f2a1f37dc597f3e8b9dbfdcff9bc5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123164
Malicious code in public-eslint-plugin-blitz-init npm...
EUVD-2025-120046
Malicious code in zephyr-init-json-cosmiconfig npm...
Malicious code in colors-init-slides-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5365fb7829cfd8ab509782ae75c027abe5acf1c7227250c2f9bce12c2c4d1e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115701
Malicious code in carina-chalk-init-astro npm...
Malicious code in odin-carpo-init-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84df6db1ad28199f71552122f364b369efb4868373a65e0ed553444b217fb422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122649
Malicious code in repository-mdx-init-xanthus npm...