424 matches found
MAL-2025-188253 Malicious code in neutronstar-quark-dotenv-safe-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ac63c08154afa26f71278cae2c6f17bf39e6835d2f205cc35e304e1bf2f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122732
Malicious code in rehype-typeorm-rate-limiter-koa npm...
EUVD-2025-115550
Malicious code in centaurus-vuepress-concurrently-koa npm...
EUVD-2025-121874
Malicious code in socketio-eslint-koa-typeorm npm...
Malicious code in koa-pipe-dorado-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5757fe0f704af36026b30b821eb55e1852c529acd48a1a22c9417e571e4f8ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113277
Malicious code in gatsby-cache-koa-eridanus npm...
EUVD-2025-124108
Malicious code in ophiuchus-duplex-koa-json npm...
Malicious code in sagitta-koa-io-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111581
Malicious code in loop-scripts-koa-oauth npm...
EUVD-2025-113366
Malicious code in fusion-restart-koa-nebula npm...
EUVD-2025-121532
Malicious code in supervisor-koa-carpo-hugo npm...
EUVD-2025-121839
Malicious code in solis-sequelize-koa-cygnus npm...
EUVD-2025-122381
Malicious code in run-script-charon-rigel-koa npm...
EUVD-2025-116022
Malicious code in bootes-gacrux-koa-npm npm...
Malicious code in koa-module-bootstrap-spica (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a4cb222471bc51975749e78a4951f374ebdaaf33f053ab57fbcd73c4c00e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in flare-koa-version-aether (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743fef05b826eca569bd55c8b8e63b265ee14b3619c017ffaf94b5c85fd9cbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111923
Malicious code in koa-development-nebula-perseus npm...
EUVD-2025-111919
Malicious code in koa-husky-indus-europa npm...
Malicious code in pegasus-terser-mongoose-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e082163d5827b000c5b136c6eb51be24e66954f12fd324992aae6f786120cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...