4737 matches found
EUVD-2025-113143
Malicious code in google-sagitta-nodejs-nightwatch npm...
Malicious code in leda-async-nodejs-izar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919099f39c4c627753c0eacb2c31a393a6a92e02b8a16c383406fc50a41281d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ursa-juno-nodejs-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd78b3ae86055614a45cad30a7916cb464db48029adf52a52105786f10ee47f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111856
Malicious code in leda-async-nodejs-izar npm...
EUVD-2025-115681
Malicious code in carina-transport-nodejs-sirius npm...
Malicious code in fornax-polaris-nodejs-ignite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 870b483c3e5dec4b59b012c59f411ded04b1a425d2ddc90c8f1879a41198ce5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122945
Malicious code in query-scorpius-meissa-nodejs npm...
EUVD-2025-116133
Malicious code in betelgeuse-betelgeuse-cassini-nodejs npm...
MAL-2025-142969 Malicious code in google-sagitta-nodejs-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338abc925116d84e0ecc7c1b0f9dda422e67c5ad6a11245fb5ce6333b89b3a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145578 Malicious code in nodejs-titan-thuban-sedna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8539e22779886967de1cf80034d2581c2dec1fc51ee6b47274fac4b08eeb6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145971 Malicious code in parcel-sedna-react-bootstrap-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae09af36af178a81acf4d4e93bc643df245329f487f8538f7c695e995af2c730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145572 Malicious code in nodejs-mongoose-dotenv-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c38ef3e18883f3950ca328b732c4c2367c7cab4f3dc2bd8ab24f4775d51cc21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141478 Malicious code in dagda-nodejs-magellan-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792a64ac652bb6ab18229a861d7f5b30e92db6d2015ab8974b4e844b2e63c799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cheerful_frog_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3862849185c3397382414e8a070e3fdda67253d43642053348131e4460f8566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-103138
Malicious code in optimisticcarpz3n npm...
MAL-2025-131706 Malicious code in zain-lapis65-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956d7ba7c23ac352f0de3cc9c1c67645105e9fae48151f3fb1fcc1f973e16029 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in close_shrew_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6955629d35c426a0fdaee25339af0cbc2577b6bbd068de90a76214ddb0b115f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-105703
Malicious code in drivingplatypusz3n npm...