622 matches found
MAL-2025-142778 Malicious code in gacrux-promise-io-nodemon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce9f10a14c1745c69d9c331cdf51b1b0ec57a2bddd319bc8a7b70f61e7ad32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146649 Malicious code in promise-rollup-miranda-nodemon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e81746e72d8a1587e17b3860845b2296f7c314699720c015d7dcf8b67504630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141068 Malicious code in configstore-xenon-promise-jest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531649ee99419507b8cc2fa55207d2d7bc6a4b7209778bf70a24fdd8fc5b8430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139470 Malicious code in antd-websockets-promise-eridanus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb7a47daf6d176ccf918828a6c23356d5df964bc510c3acbe2eb278bff3318e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145158 Malicious code in mongoose-koa-jekyll-promise (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e938303663a27d9f806911acfb796bc1db37b7e755a0b5ea10cb0f1a0132e6f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147788 Malicious code in sedna-promise-dotenv-parse-variables-vega (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4106b8b561425fbf53c8ff86d6d731d1c4ce20b3a437fe2bd4f5ad0a701667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144536 Malicious code in loop-style-loader-webpack-promise (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c401449ca2d854d6f789383555083c91f77978a2abd1a287fcc81f24166626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148600 Malicious code in testcafe-promise-eslint-plugin-canopus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e789f5a4106a260a4b5238e8e175bd5d43201b8266251052d7dd22154b8b9255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146658 Malicious code in promise-yildun-html-webpack-plugin-mocha (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f516760bc57a8ec8d22c128a4277234f4b318ecd20f0497088a49ac229b1d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123245
Malicious code in prompts-zenobia-promise-stream npm...
EUVD-2025-122950
Malicious code in query-middleware-promise-development npm...
EUVD-2025-121893
Malicious code in soap-promise-kronos-nextjs npm...
Malicious code in promise-rimraf-supervisor-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59479e17cbe88afc81a1c8a65d70256bb17e84aa6391bdafb3acfc2ccd62424d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123269
Malicious code in promise-uglify-js-chalk-sagitta npm...
EUVD-2025-123290
Malicious code in promise-antares-nconf-elara npm...
EUVD-2025-123275
Malicious code in promise-registry-bellatrix-element-ui npm...
EUVD-2025-123266
Malicious code in promise-xenos-semantic-release-grus npm...
EUVD-2025-111692
Malicious code in link-sails-promise-dynamo npm...