243 matches found
MAL-2025-148179 Malicious code in spica-slidev-ultra-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8279bbd45a36576c365070195f23b84851c549e19d14de6869131e7ad0555cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148150 Malicious code in spica-andromeda-loglevel-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee7b475b2f16de2e6e7f62b3abf6ed1d28eb1e3edf099e0649c2203bbd9fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148159 Malicious code in spica-cypress-barnard-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6102adc00966ba285ca48a5b0c9ef6bedbd9b1c15e55c5c56f7a6b132206d191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149553 Malicious code in wolf-nuxtjs-mira-spica (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3258b064bb655bb212c29f171951d33033c240d6fe5dd0b0bc92e9898d2678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121745
Malicious code in spica-spinner-rimraf-process npm...
MAL-2025-148176 Malicious code in spica-quantum-await-phenomic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c579da24df70ffc6fbf42475ea6f09c835ac823c2090fce27a08065d81176a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144669 Malicious code in magellan-toml-pyxis-spica (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6dc533b7eafd1a447732d5171a98cc252177054638dda40dfda403bdeecec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148161 Malicious code in spica-eris-spica-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149363 Malicious code in webdriver-mocha-xml-spica-wezen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec266b47cfc06dde6c7a72e9b172666365f66ef20758d077d60b99f88019d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113628
Malicious code in figures-spica-halley-enceladus npm...
Malicious code in spica-eris-spica-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116936
Malicious code in acamar-centauri-izar-spica npm...
EUVD-2025-121748
Malicious code in spica-radiant-await-docusaurus npm...
EUVD-2025-121751
Malicious code in spica-promise-halley-chariklo npm...
EUVD-2025-123668
Malicious code in pino-spica-leda-hyperion npm...
EUVD-2025-120566
Malicious code in webdriver-mocha-xml-spica-wezen npm...
EUVD-2025-122632
Malicious code in request-cordelia-cypress-spica npm...
EUVD-2025-112321
Malicious code in jabbah-spica-corvus-library npm...
Malicious code in hermes-spica-taurus-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea1b431aa27cb794f183d676334d065bb20c5a5aa85ada442e41a3e2d0837ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...