Lucene search
K

5 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 4:47 p.m.2 views

Malicious code in intan-54 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33eb6db2f50643e64a9290df1789e9767b987bf14275661fe23d4c8ff271f012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSV
OSV
added 2025/11/12 4:29 a.m.1 views

MAL-2025-140362 Malicious code in canopus-kronos-arcturus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20e4d96be919d586b8b15710cbae4a8827d448f68bc93f2af7fdbd94ccc46b34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
OSV
OSV
added 2025/11/11 7:16 a.m.1 views

MAL-2025-103170 Malicious code in gilang-toge67-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c881c86a606f0ac5ba3a9754eb0d82f144f11762ab290221cfa33a5546358a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 12:41 a.m.2 views

Malicious code in accessible-moccasin-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0696bf13796765e9f11e454569a284d08905343e4d8a56a4b1cc7e6b18167bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSV
OSV
added 2025/11/11 12:17 a.m.1 views

MAL-2025-64878 Malicious code in putra-tiwul46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e05c71e3c6eb2955fb51a7eccf2044286ac8a7922f76fc250ec75c7c31e8f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
Rows per page
Query Builder