143359 matches found
EUVD-2025-175996
Malicious code in terser-weywot-typeorm-regulus npm...
Malicious code in mesosphere-kinetic-ignite-tectonic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b5b6d11a7de70ebf25c858d96c58eb3b08a382c9a7864827f96f9a791eed7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in shelljs-zephyr-ariel-brane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c2accf9123b899ae3b61cfa4e55abfbf468be76f8c6634bec3eebe014f7187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pipe-auth0-barnard-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b3b68d9a0c694ca31182e0583f4bf4ee987574a2c4a765974633b4f89dc72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176956
Malicious code in proxima-shelljs-spinner-brane npm...
Malicious code in authorize-float-signal-string-table (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c818eb168c17bd59b31cd9c9fd8fb24062591d2a7f46885d4ae24493b54d593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in elara-triton-quasar-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2ebd6f38ab2bc5abd8dd2a5c620057c834fe86a99da5764849ed9c0b4d1e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179794
Malicious code in chakra-ui-fornax-umbriel-wezen npm...
EUVD-2025-178762
Malicious code in gatsby-config-postgres-concurrently npm...
Malicious code in cz-conventional-changelog-heliophysics-carpo-mocha (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b43b39469f3044ffca305f0206cc9adcde03611a0fd8cf39b08d0230171522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177077
Malicious code in prettier-meteor-mineralogy-vuepress npm...
Malicious code in pipe-parallax-build-kinetic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec5faf367fbd475f2fc169c244b05e140099de8dafa401f9a7d433ad56520b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175527
Malicious code in xanadu-ganymede-thuban-polaris npm...
EUVD-2025-176457
Malicious code in sedna-rigel-package-xenos npm...
Malicious code in mechatronics-arcturus-puppeteer-capella (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1eaa9f69cc53c02498bf1eed85f24aed05f14f42b3aebd1070fcefaea74066 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in node-config-mini-css-extract-plugin-bellatrix-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0f4cb1363923700e234a126ba9afc3eb8cefa5fbc782a1ed68bce1e6c9fdf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in daemon-function-throw-file-dog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a73e261a4f17a185bcca6a3ab3abc503be436cc2631043966eea2b64c29a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175580
Malicious code in websockets-kinetic-janus-sedna npm...