4784 matches found
MAL-2025-146533 Malicious code in private-halley-nodejs-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a15a54cc1eb0ce2d148b3ff7677e250f4387a0900f4a6bdb4e0858a664f377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124237
Malicious code in npm-nodejs-umbriel-buffer npm...
EUVD-2025-113757
Malicious code in exec-mui-fornax-nodejs npm...
Malicious code in carina-transport-nodejs-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9674ba3bb4b51d8d50b8bcffcf19428bbdce221fc44e026cbf3f7e6947c75775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fornax-polaris-nodejs-ignite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870b483c3e5dec4b59b012c59f411ded04b1a425d2ddc90c8f1879a41198ce5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111404
Malicious code in markdown-pdf-xerxes-eslint-config-nodejs npm...
EUVD-2025-124361
Malicious code in nodejs-cygnus-sync-markdown-pdf npm...
EUVD-2025-122945
Malicious code in query-scorpius-meissa-nodejs npm...
Malicious code in hugo-eslint-config-rimraf-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bfccf30b1a5f7c4f96740bbe3fbcbab70e17acf331b86b4d3d94a861e7f4d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123841
Malicious code in perseus-dorado-nodejs-farout npm...
EUVD-2025-121811
Malicious code in spectron-docusaurus-nodejs-postgres npm...
EUVD-2025-111856
Malicious code in leda-async-nodejs-izar npm...
EUVD-2025-116133
Malicious code in betelgeuse-betelgeuse-cassini-nodejs npm...
Malicious code in ursa-juno-nodejs-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd78b3ae86055614a45cad30a7916cb464db48029adf52a52105786f10ee47f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in leda-async-nodejs-izar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919099f39c4c627753c0eacb2c31a393a6a92e02b8a16c383406fc50a41281d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in upgrade-selenium-nodejs-lyra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c05fac68d2ae84d2d004354b5f094461e364e0f684064354fb8cd27ba37ae1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in start-ursa-nodejs-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593bc23c8976e4718436bc2e85ed27103ac307c4bd87d7308b8a3d041620871c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123785
Malicious code in phenomic-json-nodejs-configstore npm...
Malicious code in nodejs-dependencies-unuk-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071fc09dfbb31483cee6efe94d252e17936fa2604f6c450ed55d774c64b7e440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...