258 matches found
MAL-2025-139199 Malicious code in achernar-hexo-betelgeuse-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22485d24156f5b7a844676474ff062663cacf70de836551462b306a1bc5dddbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143644 Malicious code in inquirer-cosmos-sqlite-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bc7f48dbc1cbcc3b88ab693e3d514765eb32df9b7bd5a8c673dbe9e7371df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139197 Malicious code in achernar-geckodriver-element-ui-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f1253be5da971749704f5a0ca7b1672c8b75855e91d121c249fea900dfd15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145379 Malicious code in neptune-shelljs-mysql-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d160095b072fe5c1f1c68de0e9a0cb000ff18e829d29172c19bac0398cc3cdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122004
Malicious code in shelljs-luna-sadr-wezen npm...
EUVD-2025-122206
Malicious code in scorpius-shelljs-jekyll-meissa npm...
EUVD-2025-124010
Malicious code in orbit-pegasus-sync-shelljs npm...
EUVD-2025-111179
Malicious code in meteor-shelljs-miranda-oauth npm...
EUVD-2025-121998
Malicious code in shelljs-procyon-jsonp-nova npm...
EUVD-2025-121993
Malicious code in shelljs-ultra-venus-stop npm...
EUVD-2025-111231
Malicious code in metalsmith-nashira-antares-shelljs npm...
EUVD-2025-112469
Malicious code in inquirer-cosmos-sqlite-shelljs npm...
Malicious code in antares-shelljs-vega-version (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744231827bd2a82b04772b377409872008fb9107fe387353ebbc28a5be47aa13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in backend-yildun-fornax-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a40d1de5b24dbb448475870ce97fffe04c4ed911b649262851e279fd42ab9ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in delphinus-ariel-apex-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b947a9067e09e6ea0296b684556baf143d2ae93eb8a8041dc79efe79f7e54ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quark-colors-auth0-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ba7f415d5cb37f209299599f124041b0707adad331912f2dfd0d7ca5470e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in remark-shelljs-phoenix-sedna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e1017c23cd53607be3402508b6ffbe4c1cd96616b24e3103727f4e6ff2d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in shelljs-sagitta-forever-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520a636888d2b5c6bf4dc6d1cfb48b131a6cb2490a7d3d5ada301ab554f0e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...