143447 matches found
EUVD-2025-175711
Malicious code in virtualreality-abiogenesis-passport-chalk npm...
EUVD-2025-178774
Malicious code in ganymede-pegasus-xenobiology-pino npm...
EUVD-2025-179727
Malicious code in cladistics-geochemistry-vortex-panspermia npm...
Malicious code in sass-loader-castor-prettier-stylelint-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36be8c6e53454c41e44313eec1651c6e1d576f1ea1012f52e9fa79e27af392d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178257
Malicious code in json-geochemistry-exec-publish npm...
Malicious code in airbnb-oscillation-commitlint-config-angular-palynology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf800470a1681acff5740acba90cbf70748786015854f1268ff0cedb463fff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in optimize-css-assets-webpack-plugin-pm2-lyra-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741161c1e5697b9ea2854e1e99a994a7948792bbba257c3d30130fd110051d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in inquirer-technosignature-slidev-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80471215de05dc5eb8727a26889d075b75a02f35290f888d2beb43d04a1dc99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in proteomics-supernova-subduction-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc3669407f31f9abb8cfe0cb205c8684e375a293f5e45b6db130c04b4ee1a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in key-kernel-transpile-test-yaml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52a484d28ce1ebc6b67317bba20eae6af92f4599233593aaa92ff14e137a0f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180337
Malicious code in arcturus-venus-loop-cressida npm...
EUVD-2025-175679
Malicious code in vuetify-firebase-darkmatter-mineralogy npm...
Malicious code in nuxtjs-test-fornax-postgres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d5b29631fb2bda9c539656ce905f027cf1e1e09824995f998eb35c2ef8fde2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in docusaurus-thermosphere-aquarius-rehype (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cff65c97dcfbf5b82d994578654a3152ecc637488be528804a85e738be615d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in neptune-lacerta-accretion-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79e1ddb6667e6731c2582306c0b23f831c629dba94e4bc6165a1b0895384663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in kappa-debug-lambda-daemon-upsilon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 340e7954b401130e0bef74fc509ab4a6fa4925e7038a4129c5923e84ef694790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in link-cat-fork-char-easy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5ab55b4c3e29acb931e3d95408acd0a439484161dee1fdef22b993a7942071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176106
Malicious code in supernova-saturnology-asteroid-halley npm...