680 matches found
EUVD-2025-122135
Malicious code in sedna-promise-dotenv-parse-variables-vega npm...
EUVD-2025-116862
Malicious code in aether-promise-airbnb-procyon npm...
EUVD-2025-111262
Malicious code in mensa-global-promise-upgrade npm...
MAL-2025-146631 Malicious code in promise-aether-private-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e995c1fb742ffaa236c62457efe3e86f89afb596a418f5b4fec72fee723daec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148799 Malicious code in transport-promise-proxima-spectron-webdriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f046d9a431bf349ef1d33b53cc981b557a63b7aab8aebd7a20458546d1979785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114797
Malicious code in css-loader-procyon-promise-taurus npm...
EUVD-2025-123281
Malicious code in promise-graphql-start-superagent npm...
MAL-2025-146639 Malicious code in promise-galaxy-express-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d73f608b623f0b3a98949eacc4b35515f0f7ef184928ce7a965fbc14ebff47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116691
Malicious code in antares-gravity-local-promise npm...
EUVD-2025-122810
Malicious code in redis-promise-sails-umbra npm...
Malicious code in taurus-mdx-promise-browserify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c325e367241c5e965dea2194667e8e615c49c2186c63d7e8bff622220960ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146644 Malicious code in promise-meteor-dotenv-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0709454d142f7f534a5d50fd7d991e4274f59e8f69dc2746d85e4ff3417912ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146640 Malicious code in promise-global-wolf-arcturus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c542283852b34f2b6b3328de1a5885fd139dc09ab31028ccd56879b79590ad54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146638 Malicious code in promise-equinox-materialize-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c75f5cad1d0c66172e8eb6edea35a3eaa1ad979c35d1bacf45c4b3044eaba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139360 Malicious code in altair-promise-castor-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c3a1a5a4ff845ee380e66cb7b5ce3ba889f5afd50a6a1ea2e02fd6f0783031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146651 Malicious code in promise-subscription-pipe-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44873f9180d44c4ea0b33fc58995dfb2d97754c2f380301d81304b5a95ba58a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116669
Malicious code in antares-promise-thuban-ora npm...
Malicious code in quito-sequelize-process-promise (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a364f0c2f21a239ce270b172475644f8ad2280cdbb911451b5f5295a5b4c6d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...