10672 matches found
MAL-2025-139649 Malicious code in atlas-mini-css-extract-plugin-equinox-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404eaf3881cfa0b5b7b50fc02a65725729afb42926f6345a7dedfe0f35627d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121609
Malicious code in stream-galaxy-loopback-rocket npm...
EUVD-2025-123306
Malicious code in procyon-stream-registry-perseus npm...
EUVD-2025-113816
Malicious code in europa-stream-yildun-relay npm...
EUVD-2025-120708
Malicious code in vuetify-puppeteer-stream-phoebe npm...
EUVD-2025-124190
Malicious code in oauth-figures-thuban-stream npm...
MAL-2025-148327 Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae29f63ab3edd79a6f27157b2a92d2fd2d219f65bf803de9275b448418c9dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pino-pretty-gemini-blaze-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2933cf53141966341dc532869b9f1b14b26188a435d8d1446e8c5ece9588b2ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139874 Malicious code in babel-stream-loop-corvus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 065a4392b21c6e73e1e73e96a3c48ac9c44bca69e156c43e03a58cf6fb3623c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142294 Malicious code in europa-stream-yildun-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3b624a260274455e78a036a64307a519eda97234957779c2f5313e1a531af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143552 Malicious code in impulse-react-bootstrap-gacrux-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeeb91210fb4388357c7e75117778a2bbbfacf234dd1abd657a2fb9009212a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145213 Malicious code in mui-stream-jovian-canopus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20405740772ce181d90facccd90c40f356cecd0738d253ea147949d065bcedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146817 Malicious code in publish-stream-radiant-yaml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017d207c1d0a9323b05f24974015e02bb9f98d35f470de400a2f2b78c0d893b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142605 Malicious code in fornax-airbnb-callback-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7bb38b97ebf222467227cf0d8a16a2bccbe710490976a742213e6145637fc84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120279
Malicious code in xenon-neptune-phoebe-stream npm...
Malicious code in vuetify-puppeteer-stream-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4303bb98a1d550e8a4711121441236381921c720fac30b199e2d777750f88890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112561
Malicious code in impulse-react-bootstrap-gacrux-stream npm...
EUVD-2025-121602
Malicious code in stream-lint-magellan-dependencies npm...
Malicious code in neptune-stream-toml-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ecdbed3d1f61979e80b7310790181fbfae8d2f3d11f3eea7493acce573c6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...