236669 matches found
Malicious code in fork-lightyear-commitlint-unuk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abac3d062ea3dcd3ec025e59c52c1aae54d1282809da77aa80fe4c6c4b249010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178256
Malicious code in json-miranda-karma-auth0 npm...
EUVD-2025-180093
Malicious code in betelgeuse-csrf-aldebaran-json npm...
Malicious code in solarnebula-parcel-biohacking-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ed3cebc11406d149f99f7b8fed1fc90bbf3c960903007d1a3ee0dc48bedae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in compile-xi-small-star-decompress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4093c99a795c5f49e5a473608bf2cc7fec08c50ea65fd9dfe7bb1d5937deefe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178049
Malicious code in local-ariel-elara-schema npm...
EUVD-2025-178008
Malicious code in luminescence-colors-resonance-publish npm...
EUVD-2025-178791
Malicious code in gamma-good-socket-enum-route npm...
EUVD-2025-179724
Malicious code in class-debug-private-decrypt-slow npm...
Malicious code in cosmogenic-polaris-helios-atlas (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e6d3451b4d5f0da4f77046ec49acbcbb8bd9dd42f04cc2a46ade4250da3b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in upgrade-hexo-gulp-cosmogenic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fec89a7eb1a0e703849d699b2b85e2ad103da3e48674eb73284410a4a4e69b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176034
Malicious code in technosignature-wezen-blitz-blazar npm...
EUVD-2025-176514
Malicious code in saturnology-enceladus-jest-xml npm...
EUVD-2025-176974
Malicious code in protractor-nightwatch-schema-bootstrap npm...
Malicious code in mutation-cladistics-graviton-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b72ad4908dcbef9674d785f529c71aa2981793455c795ac5532487e8fc7328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in biosignature-spawn-slidev-envconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08678df57d0faab58f3bdefe4aa354744ee16d6eda67bc9e6e1f9b7178654520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in husky-bulma-nebula-concurrently (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029de86705f76c06a577e00966fac5cdab3d36021be7d50cec1844bd03f7b785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ophiuchus-vuetify-schema-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d9884ad3402f26f5a8382505851349e77b9da40d9ab72fdef1d8653e7a5ac4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in magellan-enif-oauth-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfc4c2c8bf18364da4a637c9c2468fd55bb49f379d7c4e4155628de1d3945d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...