627 matches found
Malicious code in orbit-websockets-scripts-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56dbc69781b4006e6aa721c82d0bbf279312f49f2d28c79b0fa5f0643fe9336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120270
Malicious code in xenon-schema-orbit-sirius npm...
EUVD-2025-113635
Malicious code in figures-orbit-uglify-js-uglify-js npm...
Malicious code in orbit-transport-pulsar-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0ac9a87883bd4a5728f0a6a2441250aab1ea05641e171ea404f77c2d8eb39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pulsar-orbit-capella-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bdca590ad06adc6837f3786b26dd80e42dac494df369de6e0a72cf115db638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122274
Malicious code in sails-jabbah-pegasus-orbit npm...
Malicious code in phoebe-orbit-redis-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957cfc765b8daa82d4a320788625032a8cc33b88ebf52723fcb105fbac1146fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in orbit-venus-stop-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edd2da11014ff8bb8f969442d44b52f7b98df08c630c9c20402410bc3722694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111295
Malicious code in meissa-orbit-bootes-javascript npm...
Malicious code in postcss-loader-yakutsk-europa-orbit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3934a796437258dfb3b5a9dc6649a7c7e4471263fae908da9840c57120e65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121304
Malicious code in tethys-mongodb-orbit-nconf npm...
EUVD-2025-115002
Malicious code in cordelia-orbit-mutation-prompts npm...
MAL-2025-145918 Malicious code in orbit-websockets-scripts-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56dbc69781b4006e6aa721c82d0bbf279312f49f2d28c79b0fa5f0643fe9336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145915 Malicious code in orbit-triton-request-andromeda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0261ff5b588ea919078250bc8c577b2e6b1e52d783c8bca73c12d506657f70e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148945 Malicious code in umbriel-orbit-firebase-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63d918694d1ec06ca3636e0c9f9bd1adacaa73c740b5a0878601dfcade48b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145903 Malicious code in orbit-command-geckodriver-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b739a0c92118c2d9aa0292ccbc802a6043f7e8bd70b043cc3f1cc5df3c628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in semantic-ui-global-orbit-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff00da8a18770fad505f5af64be0dda74e2e3a6e3210f93b59c825b25e84dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in odin-loop-orbit-mensa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc0f20bd252abf7728a486e9acb87f99bbda43e9c78c910ffc2f1640431f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in orbit-uglify-js-jsonp-jekyll (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2f67f51439db8d80903c494a8883b2f0a4ccb719125222b3283e8d6be238ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...