6087 matches found
EUVD-2025-116620
Malicious code in apex-native-html-webpack-plugin-betelgeuse npm...
EUVD-2025-122183
Malicious code in scripts-native-materialize-europa npm...
EUVD-2025-123719
Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll npm...
Malicious code in pegasus-ganymede-native-taurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0299fbc6c1fb17da9270c9c40c7ee1e1f3c36a76270c040a793e0f63ca2a63a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bulma-jest-native-loop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0b40cb822ff26e7b9ff2e5312fb6258c4d7e5bf4a031285331bcabfdf2cc1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123244
Malicious code in protractor-aldebaran-native-quito npm...
Malicious code in epimetheus-ganymede-native-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f9e981e62d594dce3c76d2f3f1e4089d7417c37b7e7968a8afa7284894b681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pavo-altair-native-achernar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99357f611b0c148cb640d54224f2b72469de895ef5eab012a6f4d2c54d678e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124621
Malicious code in native-venus-kastra-pino npm...
Malicious code in library-zenobia-native-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9620d5a9059a59c24af888f0c640dcbdd31ad3e5c571b59e3b1c48a9264c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124633
Malicious code in native-backend-dotenv-safe-mongodb npm...
EUVD-2025-114619
Malicious code in deimos-comet-ganymede-native npm...
EUVD-2025-112158
Malicious code in jovian-native-google-altair npm...
Malicious code in protractor-aldebaran-native-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec0d5cc0e40ec412b1d438650ad8c4376000d846c37ff0e84f10ed2b00b6ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139919 Malicious code in barnard-vuetify-lyra-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07108cd652ceada4468f324d199ae04c8c6c8ba9df2e5ec80f10369d97ecec95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147068 Malicious code in react-bootstrap-native-rehype-style-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c731557ff748c3b450e7f9a142a04f4182d48cb705f4ec926d465475eb2b7a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143039 Malicious code in gridsome-eslint-config-native-sails (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48d6b5886a28c6841a9f6c2d09635f65b9369f4b371b1122af40f7ec37d1940d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142095 Malicious code in epimetheus-ganymede-native-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f9e981e62d594dce3c76d2f3f1e4089d7417c37b7e7968a8afa7284894b681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...