44047 matches found
EUVD-2025-120818
Malicious code in venus-express-lynx-writable npm...
Malicious code in procyon-hapi-csv-flare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c05bafde1be0d3c7cd14dc9a7063a15613942905627ffbbd560696a78aef88c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quasar-firebase-fornax-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2cbf84fe96d40effc4d6859f430e71ef58609ebb50c5eac96bc704a23190e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rocket-phoebe-phoebe-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abb6f55dac5ef11374f9fa96c5771d9ecc7f08d9a77248e89188838c71138a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in wasat-andromeda-phoebe-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d09196c4b90b3a84cf7add48bfe8e3cb2279e49e087e3e677594151a90cf41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in less-cors-bootstrap-lyra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a625b4f86ac38833ce2bcd8b9b3317525645addade1fd9703904c39a78828bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113990
Malicious code in equinox-electron-mutation-dotenv npm...
Malicious code in global-dione-eleventy-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fa86d4174d75787032ca9ad72fe97137a727c350cf3755ade0e4f4408686ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114848
Malicious code in cross-env-nodemon-sedna-local npm...
Malicious code in element-ui-html-webpack-plugin-impulse-odin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a5363694bac4371cfc54011da12618a13ca07cb0b648c0243aacb32b1f569d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in command-sirius-request-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ecab9e178161b631a734be3681ba71114cffbf50a4874a3e80a01eb246d304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jasmine-mui-yakutsk-resolvers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928553531d3c4b998456ef1ebd1e1ea1aff5299daaec81eb8dc255384d96a05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in foundation-canopus-charon-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ae315c9f2f6c6650ed867026c7352f7ad0f33a06976f649b4fa2cf022f67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124776
Malicious code in mongodb-vega-nova-weywot npm...
Malicious code in barnard-neptune-celeste-kronos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328558ae8d4c2d746aef91575feb2a33df8860b28aa31408b770d6a0a71de46b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sirius-rest-atlas-rate-limiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbf9c3a8be98e085596d912e2d26f66b7541cabe171e657f3640996ee2f23be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in callisto-async-readable-ignite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c35c33f05d6aa52a43157130c15b3cb8b2935e68f7399cff7af2477785e2453d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spica-slidev-ultra-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8279bbd45a36576c365070195f23b84851c549e19d14de6869131e7ad0555cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eris-chalk-kaus-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90adeb8f738082faa8a3feb2275ba022c13d51ef8f71a33c1232ee80fe25f44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...