2809 matches found
MAL-2025-185998 Malicious code in capella-indus-config-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68bfa28ddf0fe8d14595cfe49367f754f2bc29b2a834ca5172654283e2f49c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179752
Malicious code in chariklo-sirius-relay-leda npm...
EUVD-2025-175597
Malicious code in webdriverio-less-loader-relay-venus npm...
EUVD-2025-176717
Malicious code in relay-tardigrade-typeorm-cli npm...
EUVD-2025-177995
Malicious code in lynx-supervisor-relay-loop npm...
Malicious code in cors-relay-mini-css-extract-plugin-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45b5d4138a7e858f7a94edc8c60c8746ad366a44ba1f9fafa3a7461ac2cca612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tachyon-lacerta-relay-mdx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8741edebad7eec01082ae61ad292f9f73ed7148cb75ac77435d0c139d964f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176716
Malicious code in relay-xanadu-playwright-miranda npm...
Malicious code in relay-slides-kinetic-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7388419bf031b3ce6ff52f012ff998a88362e853ce154c3126e5a055ef8f8359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176097
Malicious code in supervisor-config-hapi-relay npm...
EUVD-2025-179884
Malicious code in capella-indus-config-relay npm...
EUVD-2025-177945
Malicious code in markdown-relay-optimize-css-assets-webpack-plugin-neutrino npm...
Malicious code in capella-indus-config-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68bfa28ddf0fe8d14595cfe49367f754f2bc29b2a834ca5172654283e2f49c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in relay-halley-ophiuchus-public (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb396d85d513ea55033743e3e16569ef6ba440da167e3113d6d3ddce6e2d6372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189152 Malicious code in relay-dagda-sync-graviton (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e2fa9140c056d951512eeda4b917c4d77a95617f974d632aeae2f8e5465c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189159 Malicious code in relay-xanadu-playwright-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5b343566d9c2b440cb6c55468fbad158ae781470ddb8529d7f26d72f7a9e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111949
Malicious code in kinetic-betelgeuse-relay-toml npm...
Malicious code in indus-relay-nightwatch-google (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0cbfc7dbd014955090a7ff9658944678f02935f0e7d86b417c54fbd53fdac15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in luna-xenos-relay-carpo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c975620d825a283af00eabd79645d08b0c38867f081c7fdc2039d5129aebced0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...