252 matches found
MAL-2025-140052 Malicious code in blitz-nodejs-postcss-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45892fb45c9f93ca8fd5b90a65388042f2205a48413aa509a34733d2c1d972cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140426 Malicious code in carina-transport-nodejs-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9674ba3bb4b51d8d50b8bcffcf19428bbdce221fc44e026cbf3f7e6947c75775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146933 Malicious code in quark-pipe-mocha-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123659
Malicious code in pipe-dynamo-nodejs-stream npm...
EUVD-2025-112716
Malicious code in hugo-prompts-install-nodejs npm...
EUVD-2025-112368
Malicious code in iota-umbra-upgrade-nodejs npm...
EUVD-2025-113468
Malicious code in fornax-polaris-nodejs-ignite npm...
EUVD-2025-124347
Malicious code in nodejs-proxima-link-prettier npm...
EUVD-2025-124355
Malicious code in nodejs-grus-gacrux-auriga npm...
EUVD-2025-120073
Malicious code in zenith-polaris-warp-nodejs npm...
EUVD-2025-121641
Malicious code in start-ursa-nodejs-server npm...
EUVD-2025-124872
Malicious code in miranda-ora-module-nodejs npm...
MAL-2025-145569 Malicious code in nodejs-javascript-winston-aether (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08759811e9231c84fe5943c1d82297170a12b450089b82e470c7d2b2d89911e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148468 Malicious code in taurus-exec-javascript-repository (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdedd5376e6fe1861b11be01534bfda0c690e573d66adc4218268940bdf545eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123785
Malicious code in phenomic-json-nodejs-configstore npm...
Malicious code in nodejs-dependencies-unuk-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071fc09dfbb31483cee6efe94d252e17936fa2604f6c450ed55d774c64b7e440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ora-achernar-kinetic-postgres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b3999a1f913ccb9440477973486798c1cb1a637ffaeb420dd26a67dd1f17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124237
Malicious code in npm-nodejs-umbriel-buffer npm...