Lucene search
K

5 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 4:47 p.m.0 views

Malicious code in kupai-lukta-iga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78fc52d87782cd4599234ca1eae1504bf127ab1a8ff0b52b05b387cdef210d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 4:47 p.m.1 views

Malicious code in masako-b-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f765ae98ea33e70b51a5a92f6e8c0b6f1292c1671739c78b147ad047ad2df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSV
OSV
added 2025/11/12 4:47 p.m.2 views

MAL-2025-157347 Malicious code in kamasada-nutai-kadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e43042a54239d584ead8ddbebd97cb833ab78aa2579bbaeeaf858f72de9d567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
OSV
OSV
added 2025/11/12 4:29 a.m.1 views

MAL-2025-146046 Malicious code in pegasus-publish-mongoose-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ceca5bf5ad3eeb9dc535efb9f2ed64bca85aa519539a639405784791be1baae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
OSV
OSV
added 2025/11/11 7:26 a.m.2 views

MAL-2025-100299 Malicious code in cedric-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dfa01c0a4f8a18105a8ce1f72c2125e43b08489a4e538e68d4f1e9ae76617fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
Rows per page
Query Builder