44068 matches found
MAL-2025-105075 Malicious code in lengthy_snake-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd4ee42d8bed08b8c36f5e159bdc9b53084900a612fb94a0ffe05a5f6919f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-102882 Malicious code in fortunate_tuna-toolteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf0a819a82d584ca4f4b184b2adb0c57c75d4fde8a37aaf6eaf0ffeb38cba33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-77442
Malicious code in attractivequeleamagenta-95 npm...
Malicious code in annual_jay_yellow-85 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fae6d3c91db2cafe7e0f96adb5d7f7c8024686efcedf0ffd5811b3fdba94c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-106000 Malicious code in multiple_louse_amber-24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff61593395d271159c64a4a4b6f805ff7d45d8eb4e9ab266272b9f27503ff04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-103627 Malicious code in heavy_armadillo_aqua-64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3006bfe8f07e3f811ffc58211eff7f86b135c3b7476ca265741df5cd739c36c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in elegant_snail_blue-27 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b44eb350f1371d1127f57c0ee2cb1277dbe4d9eaf2b518c1d990a28019d54c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-105999 Malicious code in multiple_lemur_lime-94 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3befdc2f78e11ecbc902fc7b3061b7dd18422f212bef41ed1a14a021e109f4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-100076 Malicious code in brainy_planarian_blush-63 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2348c23d45b64888037dd0e601646fd14cfe7113e05daa487f52af864cf9c0aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sad_pike_indigo-55 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7619a6a2f34f6ee47d88cc5b14a0798e6da4944963adc8ed013e800373362e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in progressive_lungfish_turquoise-24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe0e71cd3f97926e595023d5b5f0bd819a3a5957ecd0dd9c89149b6359b3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in chronic_cow_coral-46 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236aad0a8d99502528aa3aabed3468fff4c05cc45b5fcbaf0863d0f839f0507f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
@dokja/dokja (1.1.4), above_angelfish_peach-86 (3.1.4) +249 more potentially affected by unknown CVE via dokja (1.1.4)
dokja NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dokja and may be impacted: - @dokja/dokja 1.1.4 - aboveangelfishpeach-86 3.1.4 - abundanttickmaroon-44 3.1.3 - activesnakewhite-91 3.2.4 - adverseelkblush-92 3.1.1 -...
MAL-2025-100199 Malicious code in busy_carp_lime-96 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7a38cadf10fb107b3eabb90c2e7fb1d10d233bdd55d4615d682dc274ef690f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zygotic_marmot_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0c7d6e5dfab5abaff7155c6e9e5014a2290dc4397dbc54eeea252ccb1b6da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in swift_goldfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34735835565ef4b7c9e0b995b94e763248ecbe32af14c4548d1ace8ac14adbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in shocked_cougar_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fce20311fb6cd9124e6f02d4ec25573752b4d0415064a9dc62243bae39374e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-79271
Malicious code in extremeturkeyz3n npm...
Malicious code in loyal_frog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a0fbf2d301dc1a2fa06f17d470d9c258065c47338ad894011594e85ec52d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...