853 matches found
MAL-2025-146845 Malicious code in pulsar-terser-publish-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3720a288da20adf950ef63d4d9940f4c6c2306532eaf5161886362bcc34b0f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121430
Malicious code in telesto-pulsar-postcss-loader-indus npm...
Malicious code in sync-pulsar-sequelize-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c73aa1ffed6dde5b54eb53a2b63d7a9e76281b20437c3d61902ec25350afeb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124007
Malicious code in orbit-transport-pulsar-fornax npm...
Malicious code in pulsar-orbit-capella-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bdca590ad06adc6837f3786b26dd80e42dac494df369de6e0a72cf115db638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pulsar-radiant-cypress-dione (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178bfda625ae6afb0496687a9c92e24aae195151c40703d0a50c6408ee55d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123567
Malicious code in polaris-mdx-pulsar-transport npm...
EUVD-2025-120036
Malicious code in zephyr-sqlite-pulsar-spectron npm...
Malicious code in barnard-luna-pulsar-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e4a6771f76faef39f94576dc35d54f956339cdad234d7db3fc5e7ce40604123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116191
Malicious code in barnard-luna-pulsar-native npm...
EUVD-2025-115908
Malicious code in build-ursa-hugo-pulsar npm...
EUVD-2025-114756
Malicious code in csv-pulsar-epimetheus-telesto npm...
EUVD-2025-115503
Malicious code in chai-pulsar-carpo-mysql npm...
EUVD-2025-111594
Malicious code in loglevel-telesto-pino-pulsar npm...
EUVD-2025-123089
Malicious code in pulsar-html-webpack-plugin-yaml-passport npm...
EUVD-2025-111762
Malicious code in levels-carpo-fusion-pulsar npm...
MAL-2025-140604 Malicious code in chai-pulsar-carpo-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce4a96f135a3c69d6d9fe7fd4f2bfb0e7b88c4879a666884f1fa4f1f6d13e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in oauth-inquirer-farout-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9db7a24ba980ff244f86a02b8ad82e55ff706357f0b6416a7a3c744de8ced2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...