1017 matches found
MAL-2025-149579 Malicious code in writable-polaris-dione-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05826b8e32c743603a0d3f4ae2d677f477afbd9da56884ba64e9c43b78e236a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145367 Malicious code in neptune-mongoose-kastra-slidev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43400e1607f9419af64ffd8712bb415e4aa32335781b992078ce9a22e64c58a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144262 Malicious code in leda-commitizen-markdown-ariel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8e979a090f60a54fca3f0d3105d850cc6f5ab00b9a750dee625b3aad03d57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149617 Malicious code in xanthus-achernar-xenon-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0307a9e41a3fb63fd942f96def2c8064a5c7e35505d8b5e4a2d76d15a67fcfdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120695
Malicious code in vulcan-fork-colors-neptune npm...
Malicious code in nuxtjs-prompts-venus-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099ff1eaceb6ff93a26f3e4896f3492526122cbb96d49d532a67135b00209a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123378
Malicious code in private-ursa-terser-capella npm...
Malicious code in betelgeuse-node-config-webdriver-mocha-auriga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6bb0a98922401bd6403c8a219e0615fc5d749430667d02d1d7b9d26dfe6227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147251 Malicious code in remark-markdownlint-capella-promise (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de9166b3835951835342cf08b9670e0fdccfae51b57ad4dfa313de94f2739e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rimraf-npm-figures-bunyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e67eca40b604a5fca714a24246f0b0b3cc6af4183d168739c32455e8d84f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in version-halley-aurora-terser (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417dbff543afff71c3268a40a187a4b20ad7b377ff7954013aced18878856eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in norma-aether-thuban-triton (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34926fe5717955e2b3719df604136815a0cd579c4e9b0a766baed82f8f5dbccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148162 Malicious code in spica-jovian-norma-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c30e9124ef655dba4f9474ca074d53809713d42b208787ccf31a36ef7a4e329a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146471 Malicious code in prettier-nightwatch-request-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ae148927e5d7b7502bad537bf67cebc1408a2573a7de2260fdf5b06c39e274e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143553 Malicious code in impulse-rimraf-schema-webdriver-manager (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f086d7a0bdd974da91e3776911c36ba418c661bbf2f3d9fb1a50f0ca0daa4c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120818
Malicious code in venus-express-lynx-writable npm...
Malicious code in quasar-firebase-fornax-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2cbf84fe96d40effc4d6859f430e71ef58609ebb50c5eac96bc704a23190e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in wasat-andromeda-phoebe-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d09196c4b90b3a84cf7add48bfe8e3cb2279e49e087e3e677594151a90cf41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...