CVE-2022-26534

FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via a malicious viewchange packet, will cause normal nodes to change view excessively and stop generating blocks...

MAL-2025-191231 Malicious code in @huntersofbook/form-naiveui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdec58532c2efc0e228886d82b5dd62cd0699f654168e5c792e524b3a2d73747 The package @huntersofbook/form-naiveui was found to contain malicious code. Source: google-open-source-security...

MAL-2025-191415 Malicious code in react-scrambled-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3888a54f9c5c14abb5fd0b64ec41778b1bc989da36cd5e48a480514eb81b9e57 The package react-scrambled-text was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191308 Malicious code in @quick-start-soft/quick-remove-image-background (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9fbf3fe9e4ab7de62ad125cf8376c5b6f00b67df5291788b607659981ff021 The package @quick-start-soft/quick-remove-image-background was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-198816

Malicious code in test-foundry-app npm...

Malicious code in less-astrochemistry-ceres-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce97bc6d36bcde07bce91a015dec579ae6795f061e92685f77111fbb9c91bc6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bioinformatics-proxima-uglify-js-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b2714f42d0f923659472aa13696e78a1b29164f409010a8320d0433129c6c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in futurology-jsonp-process-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83de495bfed417c3f9ff4e357e38dfd3504a6671650b88cb9cb5100abba672b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-volcanology-cassini-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7589b6b476a0d49718b7677648fafc99e80a2deff34cd47f56d644c1346d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-bulma-nebula-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029de86705f76c06a577e00966fac5cdab3d36021be7d50cec1844bd03f7b785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-planckscale-helmet-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f72530dd247b457218e0e4f8916ac3dc415a8a2eab4401eb9bd37f23deb50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-daemon-pipe-try-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316ddbb2ffbd1c43021a6c11d374e9f08b52489cfe301ca4161e0c5bb3169d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-levels-lepton-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6bc901157dba2a0f11bcf68e5429ef2be6851012441f8d6b91565d140110d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-perseus-eslint-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e806cff752234b07a544f7a82097f1f529d1e1a23d1d6276aab2245ee0cc70cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in import-omega-long-cloud-gamma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ef12eb1f77e3a9297d64051d6f96214b0bc858f070a63bfce67924055b48f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planckscale-ora-envconfig-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb106b457d5f917ba8c7114dbb5f21f91e8bfd4bc12332d92ae52143d6d392e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in javascript-magnetar-epimetheus-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd836a25d5aa73f526777d2c602b2a919e137b30c1167b63e65262a3eece2544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-enif-gulp-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 122bef2ede3ab83f9e66df9ad3abbfc3f659d6ffed354515ec638847a8bdc732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aldebaran-quantum-babel-steganography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e432f722c7db5ff51f734dd2a1307f770c81673653a4f35fc65218ea770c1f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-typeorm-nebula-eigenstate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72fcd61b1ebbef2bb21f395e514ac614ffc611617ad7b96a4f87213510556a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...