236668 matches found
Malicious code in upgrade-async-forever-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75caed0ce1fb98070ff3b33974aacb7b1939cc7108213d2042323c1aa276575d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178678
Malicious code in graphql-elektra-triton-transform npm...
EUVD-2025-175845
Malicious code in ultra-html-webpack-plugin-zenith-quito npm...
Malicious code in umbra-jekyll-foundation-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c106822cf8e3fa26d502751c57e0f20c137335a06eaa078c6724cb7fa72d9938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187154 Malicious code in geoarchaeology-oberon-proteomics-xenon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4457df8bb683c248eb0726675b92eb63a0c31125a2f8c3dbdee0b1dae031dcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in callback-upgrade-ophiuchus-achernar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a0e7ea27c39c0994bad0e12f99255722091fc3c0df8286c617e33cbe7a8d4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in finally-function-boolean-refactor-runtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee4d596d3d5de9024b75ee7f595262969bb1f126b1d3cbf2688b216df11c2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178884
Malicious code in flare-sirius-parallax-cross-env npm...
EUVD-2025-179075
Malicious code in eridanus-geochronology-element-ui-io npm...
EUVD-2025-178554
Malicious code in helmet-sagitta-saturnology-element-ui npm...
EUVD-2025-177095
Malicious code in postcss-loader-hapi-publish-event npm...
EUVD-2025-178880
Malicious code in float-rain-finally-yaml-air npm...
Malicious code in solis-perseus-bootstrap-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b8d59746c8916f2d0e0aa816776331f332804015a10f708950338801106be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in callisto-module-module-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 356ff25afa3f90e1c8c9dcc12dbc8a9ac87666afec50cb83e076db197a2abac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in changelog-prompts-europa-blazar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 146d38799b702fcf2aa71251a53635f3352bc26fc8c894932530f350b66a69b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in final-secure-epsilon-catch-book (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e86d24f9e0aa24c62e5e4c9ec1038d73add02f6ef91a7fcf8a98ddf0a6de0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178680
Malicious code in got-nightwatch-despina-react-bootstrap npm...
EUVD-2025-175663
Malicious code in warn-function-assert-report-thread npm...
Malicious code in comet-rehype-transport-entanglement (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f76cda7e3ed87a43e6e01759a8df12b7cdc8c0be725210b3f7a49e834137a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...