637 matches found
Malicious code in geckodriver-nebula-spawn-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0f439f3314d535195f43a58fea27de3a38211dbd7367c379d737eb31a99b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176761
Malicious code in redshift-nebula-cz-conventional-changelog-fornax npm...
EUVD-2025-176412
Malicious code in server-nebula-cosmiconfig-umbra npm...
EUVD-2025-176836
Malicious code in query-betelgeuse-nebula-dotenv-safe npm...
EUVD-2025-176794
Malicious code in rate-limiter-callback-nebula-electron npm...
Malicious code in remark-loglevel-process-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b2cdb762f4052d4146c3d2d35d10fe3fe6516343cf764c76cc9a051dfc4474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nebula-init-resolvers-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4267813674b3508d993913145c41501a2e39ab266d217f2861c06713c3b87bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nebula-build-auth0-mui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f27094bea7cf9d6b3712a3714081b3884123be343a197952c08d6ad1b940f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177680
Malicious code in nebula-development-less-loader-achernar npm...
Malicious code in nebula-deneb-winston-apex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0735a38c36f2def41b0e0f45a429e1d63bd1f07e44636f8161b6c11d78985b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177207
Malicious code in phoebe-react-bootstrap-heliophysics-nebula npm...
Malicious code in aurora-exec-nebula-titan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727d149233b8486494ce40ab83a3e2e4ecf442479f183b3b96baae8f80f59da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175460
Malicious code in yakutsk-electron-nebula-jekyll npm...
EUVD-2025-177990
Malicious code in lyra-nebula-node-config-terser-webpack-plugin npm...
EUVD-2025-177686
Malicious code in nebula-await-paleoecology-grus npm...
MAL-2025-188197 Malicious code in nebula-build-auth0-mui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f27094bea7cf9d6b3712a3714081b3884123be343a197952c08d6ad1b940f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188205 Malicious code in nebula-gulp-bootes-kastra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb6b5c7c5ee58afca59f9703c1eb66b71298f71dace2f66ef3181095fc0f2b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189143 Malicious code in rehype-janus-nebula-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b030dfe78269f05856c1d36dcfb4812704739de10c5ef8312af45bf99110f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187128 Malicious code in geckodriver-nebula-spawn-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0f439f3314d535195f43a58fea27de3a38211dbd7367c379d737eb31a99b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...