24479 matches found
Malicious code in phoenix-ophiuchus-webdriver-mocha-zenobia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc99ba026da8566d257a516cae1495a6154a7a20dbfb8f5dcb605c6e138958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in duplex-winston-loop-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a43e2d71c5eae6cd6f7c189f43194e31c47478b8fe2987a3495d58736c1caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114287
Malicious code in duplex-winston-loop-hyperion npm...
EUVD-2025-111577
Malicious code in loop-xenos-config-pegasus npm...
EUVD-2025-123136
Malicious code in publish-halley-antares-loop npm...
EUVD-2025-124307
Malicious code in non-blocking-loop-semantic-ui-despina npm...
EUVD-2025-122450
Malicious code in rocket-koa-query-loop npm...
MAL-2025-148253 Malicious code in standard-electron-algol-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefdcbff234b32eaa809ef06910becc75ac6bd245a7a811a8ceb9c68df4b7ddb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in auth0-cygnus-farout-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f358ba8f4b4d9e99efca5ba9615c7aca5971cc9cc415499a66f3b5529194551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sqlite-transform-jest-loop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4edbfb4264847c384da631ea6bc0589e5e25634a72695e65abc456edddc215b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115278
Malicious code in cluster-loop-ignite-telesto npm...
MAL-2025-145000 Malicious code in mira-altair-markdownlint-electron-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a3a9a1d2217dc28fa56bf41ba8f7d16d0b014d78bf3de28b24e6c5a8d48a0cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140253 Malicious code in bunyan-quark-loop-celeste (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe676a6d3e7e3665526bef653839a527974f4af6ce865b9901c31d442682f32b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122314
Malicious code in sagitta-perseus-figures-loop npm...
MAL-2025-139874 Malicious code in babel-stream-loop-corvus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 065a4392b21c6e73e1e73e96a3c48ac9c44bca69e156c43e03a58cf6fb3623c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112331
Malicious code in jabbah-loop-corvus-style-loader npm...
MAL-2025-143497 Malicious code in hyperion-rollup-plugin-loop-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71fc72224b44f83c3a8f5dda2c26aa1b2e517794db68c1a486d37563bf0056bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147042 Malicious code in rate-limiter-loop-npm-farout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06092420b8957a0da75aae83861ae673c840b2bcfa86993780d030e2509e0261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in odin-loop-orbit-mensa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc0f20bd252abf7728a486e9acb87f99bbda43e9c78c910ffc2f1640431f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...