24479 matches found
Malicious code in tealove-nice24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e61dfa3e2e698090493aadb53443c9f6d016669ce1b4dfafac6209d1978cf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in andriani-poke10 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b40f6806402f64d2000ca5201cfff139e49bef77e5ec8ccfd3a66f77a41af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aiboa-moilpe-araunsuiogo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebbe433bcdd03de9e66676b82837641a8a9fce27045b10f5ec7d7ca86eff068b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-165668 Malicious code in saku-aku-iu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435ef981b707d8fe5634c7bf55e7a45abb2d0be7e59892fa2f52e071c83dbd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-150650 Malicious code in @miptaa02/fih (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87dfc77cda7b37c400d96d6c4d64c771dd41ae38082f1c8a6311fcaf6e6f87b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120716
Malicious code in vuetify-loop-convict-run-script npm...
EUVD-2025-122187
Malicious code in scripts-loop-zephyr-lynx npm...
EUVD-2025-111588
Malicious code in loop-hugo-cz-conventional-changelog-markdown npm...
Malicious code in babel-playwright-luna-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386e381d89b1d096d764b416362ba70740124f35f6bd65f19f671ca6656b8881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in scripts-eridanus-duplex-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc40e9b3651a910d7a97424e0a6b2f9dfb784f58b1ac169adad47c54b88f1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122852
Malicious code in react-bootstrap-perseus-loop-octans npm...
EUVD-2025-122031
Malicious code in server-command-lyra-loop npm...
EUVD-2025-122843
Malicious code in readable-element-ui-webdriver-mocha-loop npm...
Malicious code in eridanus-shelljs-oberon-epimetheus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedf7fcac32902d42c53e87e4ae9c10496ac0ed93504a0123a0f2c6475eb893d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in json-ophiuchus-jovian-writable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d659d7f90a9182f59291cdce9db87464dc18d0fafa9c045337b245b6bd786c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115888
Malicious code in bulma-jest-native-loop npm...
EUVD-2025-111574
Malicious code in loop-zenith-chromedriver-kronos npm...
EUVD-2025-111587
Malicious code in loop-loglevel-rimraf-despina npm...
Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d632874fbec3cd15f7617090139bd5b08fba0e32ae4c061de45fdb9738e80ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...