143416 matches found
EUVD-2025-176089
Malicious code in sync-taurus-cluster-webpack npm...
EUVD-2025-178673
Malicious code in graviton-command-global-axios npm...
EUVD-2025-178585
Malicious code in hawkingradiation-sadr-buffer-heliophysics npm...
Malicious code in umbra-farout-barnard-redshift (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3deb299289ab58a5d665be2d8f00891334e73390e4ea998ace64dc54f4c5613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175493
Malicious code in xerxes-auth-jekyll-ionosphere npm...
Malicious code in speleology-ganymede-halley-panspermia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a4e204a906cdfd8a5558d263c05149b2236580f35ac76afc37f33536655421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178712
Malicious code in geomorphology-materialize-perturbation-accretion npm...
Malicious code in despina-winston-query-higgs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362b8b18f444cbd8cc2912c6a22a8f1e5f7ee815915e3b8ba8919a2bf176e561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in native-nashira-seismology-heliophysics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727447041b626199e98814dfab93fcda621b58917fdb68844e29b0b7d8e48327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in geoarchaeology-sagitta-chalk-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bc927471dab8293245039be0832db1245124759c8766ad7d47fa4e60f26052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lacerta-ceres-jwt-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9ef158e3d8954448aae52a5a567e27d1ce378b34dfd354ba3f163720c80229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175667
Malicious code in vulcan-semantic-release-pino-adonis npm...
Malicious code in gatsby-fornax-nuxtjs-vuetify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17493a8c27f8742691d5fb50ff801a6a531114bb0524fe9605d6af16d32780de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178376
Malicious code in integer-tau-chi-alert-gamma npm...
EUVD-2025-178634
Malicious code in grus-schema-odin-library npm...
EUVD-2025-176022
Malicious code in telesto-neptune-tethys-shelljs npm...
Malicious code in meteor-paleoecology-mysql-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4496238327c201e2b75a77378a59756e8b115ae18a4d8560bcb5bd70e5f421c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in blueshift-perturbation-centauri-paleoceanography (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841e48167a2e8941ea52d3d87bb92b2dec4bd11e24239da9550cc850ff6ac3d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...