18408 matches found
EUVD-2025-122660
Malicious code in repository-dependencies-hydra-async npm...
EUVD-2025-111525
Malicious code in lynx-csv-bunyan-repository npm...
EUVD-2025-116439
Malicious code in atlas-typeorm-jsonp-repository npm...
EUVD-2025-113460
Malicious code in fornax-repository-json-hermes npm...
MAL-2025-139663 Malicious code in atlas-typeorm-jsonp-repository (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a937ac555dd0194b7f6f5ba5db28bbd261412ec503e9a23d31fb3992b936bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147272 Malicious code in repository-lyra-react-bootstrap-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96745fb4e087f1d2fa6cc12f0673c34c9c89de6e5261f9db9d80208c34740662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140694 Malicious code in chariklo-deneb-helmet-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28478627d626861b611cc3756365e1c59d62e7aa61b91eb8fd25ec2727fb6a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149659 Malicious code in xenon-repository-radiant-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46799f01c1add7c954c79d53f8c463356b37c7c7e01ecf694e3104e98508858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140257 Malicious code in bunyan-spectron-webdriver-levels-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59afb146d54e37d45ee9758db697a52bdfbf02c0221da29a86c0a21320fc2a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141850 Malicious code in eclipse-forever-prompts-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2034ba99b3fac3845b32a389d7bd18a7f63cdd0abbde72b03416fab0083e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121460
Malicious code in taurus-exec-javascript-repository npm...
MAL-2025-140881 Malicious code in comet-mira-lyra-prettier-stylelint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9a1aeeac3691d5a766fdca3a7307d890a9cf2c5a2f47a2dee1a19284483fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120324
Malicious code in xanadu-repository-csv-venus npm...
EUVD-2025-121449
Malicious code in taurus-repository-scorpius-antares npm...
MAL-2025-140511 Malicious code in celeste-juno-restart-tethys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e323730ed431ba0402402ddebb72abbf45522ea92c6910ada2bf7ebe2a01509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141787 Malicious code in draco-altair-repository-kinetic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39da5b7d66f058158f9338114fef59667d4d5f153c6d1ee354332defe2171e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146363 Malicious code in polaris-repository-ignite-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae54010ef3eed19bcf96488eff384a8b20c5631c658cf381d8e92f2484cdaff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144472 Malicious code in lint-staged-xerxes-repository-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9139a900e53769bc31e4a3c68db8adba88b9271bf86ea79fda3761e3b0954062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mensa-global-promise-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c94e7b9cf8e7ef681f2d8b9d20af61cfbb0ab1bd542dbba0f84d592e384c12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...