236669 matches found
EUVD-2025-177936
Malicious code in materialize-prosthetics-petrology-resonance npm...
Malicious code in eclipse-eridanus-upgrade-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9c1477a3588485280f9a465ef1fc8ff66f1091fe204ff4e7c224e91a7c634b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177989
Malicious code in lyra-taphonomy-fusion-exosphere npm...
EUVD-2025-175748
Malicious code in user-reject-good-code-sed npm...
Malicious code in init-parcel-run-script-hugo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 258bb21c3a3de866aaa23cbb8d387c7def0f1812acd17a8cd69e306b229a92b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in native-electron-builder-nashira-tachyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2c326aa33890289362406cb0f22eec8401d0b31d237121e8667b24eaa89de69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dagda-ganymede-fornax-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c482e6ef43cf12ba929a25f688df88502f4b2657364bb234a83ecb03729ec0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in parse-rho-wind-compress-simple (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc74d0b4f7851739d57d20a63fb3e706a3d684a0ac314906182c64d39b1dfc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180103
Malicious code in beta-enum-notify-view-stack npm...
Malicious code in acamar-xenon-eslint-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66894e71892101c8dd7c29f71d32f135677cd05c77630b1a91fdc89c9a2f1d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178097
Malicious code in lightyear-cors-quasar-procyon npm...
Malicious code in epsilon-catch-cold-beta-new (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07eb346f6c1bd850321de8cf4d2c038bc01bd3f69145e866d7ca9c0199128ef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nightwatch-loopback-delphinus-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86bd51a45b3ad13b8d4799d005c23c7a3c15863d564a5a40eeff8179e9414fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pegasus-pulsar-plutology-astrochemistry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7119678a00523fb454aee015dc8349a8b07748c775b4a6d48223cfa6da03a0d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176494
Malicious code in scorpius-version-convict-private npm...
EUVD-2025-176587
Malicious code in route-proxy-alpha-export-monitor npm...
EUVD-2025-179943
Malicious code in bundle-alert-runtime-private-bundle npm...
EUVD-2025-175698
Malicious code in void-exoplanet-ganymede-geodynamo npm...
Malicious code in planckscale-ora-envconfig-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb106b457d5f917ba8c7114dbb5f21f91e8bfd4bc12332d92ae52143d6d392e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...