427 matches found
MAL-2025-144209 Malicious code in koa-testcafe-koa-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ba567e6bbedaaba4579cca62d69d9473426445d875a51b7d5ba3fb7b433575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116054
Malicious code in blitz-koa-umbra-fork npm...
MAL-2025-148915 Malicious code in umbra-chalk-zenith-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9f0749f6807047fc716098a7e59564eff5af9f83ed200b75d93cccbcbbf8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147601 Malicious code in sagitta-koa-io-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140338 Malicious code in callisto-koa-passport-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0618017da8555c11693d63a92fb08bd79ee8b5a12fa2199727a8fbca59b2c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144534 Malicious code in loop-scripts-koa-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8bd7851dd59a18465c76cea03c8ddae5cbf1b88a7a03c3e87200dc9451156a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143820 Malicious code in janus-mysql-koa-unuk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea8a1aaeac6c1573aba5d83e8b0d8aabac6f7118b4d1347f2ede074d5347984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144721 Malicious code in markdownlint-antares-google-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 204408f6254a7b497b0c72adb8496ab013f648f046eb3bf4427efeeaae9de8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140576 Malicious code in ceres-scripts-koa-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111920
Malicious code in koa-gravity-magellan-helmet npm...
EUVD-2025-120346
Malicious code in writable-yakutsk-loglevel-koa npm...
EUVD-2025-111917
Malicious code in koa-module-bootstrap-spica npm...
EUVD-2025-113683
Malicious code in farout-tethys-antares-koa npm...
EUVD-2025-111908
Malicious code in koa-request-backend-cors npm...
EUVD-2025-120161
Malicious code in yakutsk-html-webpack-plugin-koa-mutation npm...
Malicious code in koa-pyxis-xanadu-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594a03c6489def7ddf1102a975db9f1cc23cc3c4b05bb3931ef7cd2c7b6eccd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in chakra-ui-neptune-eslint-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c4f096543a30ee5960737681cf9b3aa1939dc04aebef1c0ef66fe0b9706477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115639
Malicious code in cassini-koa-nuxtjs-eslint-plugin npm...
Malicious code in titan-tailwindcss-koa-transport (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc07afb489f3fefb44ee960e27915b773a85eca1cca9ffa50c5c027d2283e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...