2014 matches found
EUVD-2025-111927
Malicious code in kinetic-spawn-stop-browserify npm...
Malicious code in pavo-stop-aether-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc07d6adfa8c2639fddeb3a5293bf6a4cc3c3acf30f84c04dacd7f8b46a939d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144040 Malicious code in juno-superagent-stop-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987855d522deaa8e2efe1c3697d32579dd6a94d8373a06d043bec7b5547b0efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in node-sass-loglevel-stop-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7535b8bc3308fea5d62aa18a1d257a3e693dea8b423fcfeac5e9ae315d78a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112320
Malicious code in jabbah-stop-fork-andromeda npm...
EUVD-2025-114355
Malicious code in dotenv-safe-hermes-config-stop npm...
Malicious code in express-pyxis-sails-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1185fc0d42439e9df48781b08bbf46abcbb40b9f5715d77e835e5d53d1bbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sqlite-stop-blitz-morgan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8827208887d475e0e416b194ba336bf49e238e51cccf1d36e5c344c213c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121625
Malicious code in stop-package-phenomic-cz-conventional-changelog npm...
MAL-2025-148308 Malicious code in stop-winston-bulma-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e6a3b48b1fa6a57f7a149b87c21c622de6c043358cb99a7e0448970c1f9783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in protractor-ursa-stop-sedna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013a698a464cce2a500f25f760be7bc42e4cbb17330e537716c604dc84004c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124164
Malicious code in oberon-sedna-css-loader-stop npm...
MAL-2025-148287 Malicious code in stop-bellatrix-sequelize-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f95ec2b2a6ea8e1d2f211242daea24e2ee014d180e06f0bcf4dd320bfa5b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145546 Malicious code in node-sass-loglevel-stop-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7535b8bc3308fea5d62aa18a1d257a3e693dea8b423fcfeac5e9ae315d78a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146013 Malicious code in pavo-tethys-stop-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e80ef22620456b87134e65d7274869649deef01e92932db075a10cbb52bc768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140608 Malicious code in chai-zephyr-jasmine-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d141d9e454317e0cf8e1698d576224400e48df61534527f0678f0d477a7953c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123908
Malicious code in pavo-tethys-stop-css-minimizer-webpack-plugin npm...
EUVD-2025-121624
Malicious code in stop-polaris-gravity-apollo npm...
Malicious code in gemini-lyra-stop-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de05007ded0357f96c6580f461bd2d5f802efa82ccee17f4206e5a4433c0b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...