5844 matches found
Malicious code in sirius-fork-nodejs-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6c1bd831399d8c2b516a325a12d79cba13a091a76042525b7e1c1c6feb29e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112979
Malicious code in halley-cosmiconfig-nodejs-ganymede npm...
Malicious code in pipe-dynamo-nodejs-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9dac7feb2c94e2e98f30abb6178870ede5b7ff4102a2d06705e6c6e7f5490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121090
Malicious code in typeorm-bulma-optimize-css-assets-webpack-plugin-nodejs npm...
Malicious code in procyon-nodejs-link-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6885027c9d224f1ad6b3459b777b2bc5cea2880932235a3b714080e6f01573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113468
Malicious code in fornax-polaris-nodejs-ignite npm...
EUVD-2025-123314
Malicious code in procyon-nodejs-link-metalsmith npm...
Malicious code in blitz-nodejs-postcss-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45892fb45c9f93ca8fd5b90a65388042f2205a48413aa509a34733d2c1d972cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145694 Malicious code in nuxtjs-apollo-gulp-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6597f351418457f4a298e75a760f4998e77546742ce0037ebdfd07297dda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121176
Malicious code in tool-sails-nodejs-resolvers npm...
EUVD-2025-122989
Malicious code in quark-pipe-mocha-nodejs npm...
Malicious code in zenobia-nodejs-sass-loader-phoenix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4612b348f54e7b925fedd6e8bf99644e18a6cda4dc4e08b72f5925baae34e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123389
Malicious code in private-halley-nodejs-subscription npm...
MAL-2025-140426 Malicious code in carina-transport-nodejs-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9674ba3bb4b51d8d50b8bcffcf19428bbdce221fc44e026cbf3f7e6947c75775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120062
Malicious code in zenobia-nodejs-sass-loader-phoenix npm...
Malicious code in upgrade-selenium-nodejs-lyra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c05fac68d2ae84d2d004354b5f094461e364e0f684064354fb8cd27ba37ae1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142793 Malicious code in galaxy-nodejs-ultra-wasat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f3668b7d034cfc50c80bd3571e04523f59d1da1eb4392fdf1be9e724ce1663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124227
Malicious code in nuxtjs-apollo-gulp-nodejs npm...