236664 matches found
Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30834a5fbe857adb14874de5f845460556c9a36ba75d7c2eee5f917aa980bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lint-staged-reveal-md-electron-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa54493c930c23e4a10f52ee0582222498e976e40d79d36f0cfaf4c33da601ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178254
Malicious code in json-stream-aquarius-cygnus npm...
EUVD-2025-179535
Malicious code in cosmochemistry-less-enceladus-eigenstate npm...
EUVD-2025-177240
Malicious code in perturbation-nextjs-singularity-gravitationalwave npm...
EUVD-2025-179386
Malicious code in debug-container-zeta-load-log npm...
EUVD-2025-177696
Malicious code in native-thermosphere-hermes-server npm...
EUVD-2025-175661
Malicious code in warn-shell-async-virtualize-mu npm...
Malicious code in archaeometry-rollup-plugin-astro-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dcfdaa9a4222852d826a3e0212b6a3584a79729124a8ff9ee1178222bb3de18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in apollo-spinner-solis-rigel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d92bc8e061659af9912ea6207249e0e7d6993cab9fd076885c4a2971c386498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178475
Malicious code in hydrogeology-mesosphere-event-troposphere npm...
EUVD-2025-178506
Malicious code in html-webpack-plugin-promise-meteor-dactyl npm...
Malicious code in exec-local-mongoose-dione (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b872afd1ac291d4ad9a6557070b1a111c63c386c84d16d9637c174bb6e04f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175448
Malicious code in yaml-notify-authorize-code-web npm...
EUVD-2025-178742
Malicious code in gemini-ionosphere-superposition-package npm...
Malicious code in meissa-hermes-callisto-sails (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b633dc83b81fa2bf2811bca79ee36d4afe31a1d5a5ca8d3cb8a5bf01364c7dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in webdriver-manager-ethology-kastra-biotechnology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d50f3fa880cc105429f154e2bc09e5b09429538db303307688c9609ca30e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in meteor-singularitarianism-procyon-nova (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f87e7aabd6edcc6661dabe6c7ba3b26e4096378ffca7f6816c4bc5e8e82a9d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cat-meta-stack-minify-try (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80dec973455eae025b75ae4a2fb66d3f693521c903c9ca3af246808867e0af65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...