680 matches found
MAL-2025-139470 Malicious code in antd-websockets-promise-eridanus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb7a47daf6d176ccf918828a6c23356d5df964bc510c3acbe2eb278bff3318e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142778 Malicious code in gacrux-promise-io-nodemon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce9f10a14c1745c69d9c331cdf51b1b0ec57a2bddd319bc8a7b70f61e7ad32a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143315 Malicious code in hermes-development-virgo-promise (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9ebfa206b435c81a56d67d919dc4e28ddfda901b05abe2419b067e8de16f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141068 Malicious code in configstore-xenon-promise-jest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531649ee99419507b8cc2fa55207d2d7bc6a4b7209778bf70a24fdd8fc5b8430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123280
Malicious code in promise-loop-server-farout npm...
EUVD-2025-123291
Malicious code in promise-aether-private-non-blocking npm...
EUVD-2025-111290
Malicious code in meissa-pipe-dependencies-promise npm...
EUVD-2025-123271
Malicious code in promise-subscription-pipe-bellatrix npm...
Malicious code in bunyan-promise-mongoose-restart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53bb462501821db097afe4d817964df59b4d319045bf01e3471e2e443cae8cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in promise-galaxy-express-css-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d73f608b623f0b3a98949eacc4b35515f0f7ef184928ce7a965fbc14ebff47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114611
Malicious code in deimos-juno-sails-promise npm...
Malicious code in promise-rimraf-supervisor-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59479e17cbe88afc81a1c8a65d70256bb17e84aa6391bdafb3acfc2ccd62424d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123288
Malicious code in promise-castor-pyxis-pipe npm...
EUVD-2025-111692
Malicious code in link-sails-promise-dynamo npm...
EUVD-2025-121191
Malicious code in tool-jabbah-promise-charon npm...
EUVD-2025-122950
Malicious code in query-middleware-promise-development npm...
EUVD-2025-112231
Malicious code in javascript-nconf-ursa-promise npm...
EUVD-2025-115541
Malicious code in ceres-geckodriver-hercules-promise npm...