143357 matches found
MAL-2025-187238 Malicious code in gridsome-slides-pipe-socketio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3041ecadbfa1b9ee20c448a9f21b65c9463e9e394b9f82d5a14402dab7ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186514 Malicious code in deimos-concurrently-outercore-browserify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffa621761675fd2e3ec7b468f01d71eee4ac950beb2e51f7e89d5533a0a6b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189697 Malicious code in string-eslint-antd-cosmology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09b41ae985cda899d985058606ef63413008d232b4ee9a9dcdea6bedafeaac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189174 Malicious code in remark-exosphere-cosmicsilence-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e957895b962f8adc6e7b566c2611a524875a29b93490125c8e08a0c643b3e0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186290 Malicious code in container-bundle-wind-private-resolve (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db1e29795f86285de0d3050a91ae132752d5fe260eb95e9a4c113a4d16ed7da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189290 Malicious code in run-script-juno-supernova-commitlint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5416570aa5bf98628db20b38d6aa688ee1a11743013f75bbbf34b033fb219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189040 Malicious code in query-regulus-bionics-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab2ac9bbf76ae17ec6c45f2dead8e433092cceef588c319f4d72f40571f4219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190135 Malicious code in vega-toml-hexo-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb24c32e4d09b99287614e8f188638625c244dfd0b4f79bb5170f0788ef9b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186069 Malicious code in centaurus-triton-library-resolvers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508d04582683b1a2b69f84330b530a99d086493e9e8e58e18c5c504817462a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188521 Malicious code in paleoecology-tardigrade-express-rocket (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab02d785c1af544c7c0c174e3a90bdc47d16a2f816fbd258d3b669ccf44e59ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188522 Malicious code in paleoecology-webdriver-manager-cli-outercore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1702a5ded5d7db3c4166a15a439a1ab13253c487e4124cb1374ba85b937cfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187942 Malicious code in materialize-dotenv-safe-sublimation-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefa120636cfd6f73b190f56220380ce77849e4a839a8559d1106992e1aa7d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187168 Malicious code in geomorphology-cressida-sync-atlas (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11711063a044e5d7e1bc0cfa7de9648f003912b46d0a0be5861aae49d90d7d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187606 Malicious code in jekyll-reveal-md-redgiant-prettier-plugin-markdown (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c9c6236c7f7d2842ff10d43aad3fc54b3aec809b61ad00a2459b56f5e3bbbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189371 Malicious code in scale-parse-await-book-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf23bd6ac11aee950532e019d12d27aef2b746a2fcd39db0eafe766558432d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190487 Malicious code in zooarchaeology-install-aether-extremophile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c22366e1d5300faf7e5c1fe07291be7060715baefed7aae9da5cc0a995bc55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in slidev-odin-charon-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a6f20651e71b9191c950fc2cbdba6720c98b9935f61ba97cc07e440604538e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179189
Malicious code in elara-express-babel-meteor npm...
Malicious code in nu-interpret-container-grep-bad (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fcf0f0b56c9bcce303f3f0b00cd434d5f276b06967ac7541976361325bfcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...