163 matches found
MAL-2025-93610 Malicious code in collective_starfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 069a605fb8fa197e60b32ea1775950ef0daed61a99a73b1b0642fe2313b100a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-96599 Malicious code in simple_starfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b18eb4395ad66014c0af7ab6e7a50530f3979c8291a46052611aeeb4c2f567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-61389
Malicious code in youngstarfishz3n npm...
EUVD-2025-62071
Malicious code in vulnerablestarfishz3n npm...
EUVD-2025-67350
Malicious code in recentstarfishz3n npm...
EUVD-2025-84738
Malicious code in metropolitanstarfishz3n npm...
EUVD-2025-86160
Malicious code in extremestarfishz3n npm...
EUVD-2025-86963
Malicious code in betterstarfishz3n npm...
MAL-2025-88422 Malicious code in metropolitan_starfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17e4622ad1d2b6babad74e4eac8dc6ef49845c87805221e30801cc07d7805bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51007
Malicious code in worthwhile-chocolate-starfish npm...
Malicious code in apparent-red-starfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e4e48689350ed839a7be44b24dd5990a0c44640fba72fb621de7d01f98d19b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bitter-amaranth-starfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685da90c788d49cc51fa687222e101b05dc039c5915454556f1deba7f221632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52345
Malicious code in religious-peach-starfish npm...
EUVD-2025-54283
Malicious code in fluffy-tan-starfish npm...
EUVD-2025-54757
Malicious code in due-magenta-starfish npm...
EUVD-2025-54522
Malicious code in evolutionary-yellow-starfish npm...
EUVD-2025-55838
Malicious code in apparent-red-starfish npm...
EUVD-2025-55674
Malicious code in bitter-amaranth-starfish npm...