569 matches found
EUVD-2025-121446
Malicious code in taurus-uninstall-commitizen-postcss-loader npm...
Malicious code in sedna-mongoose-mdx-taurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685c7f1a1ccbaf9d2854a73087c26e670062432dfb5c8300287384444aca577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112847
Malicious code in helmet-taurus-json-alphard npm...
Malicious code in antares-mysql-gacrux-taurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edba824e6fe768f08d584a55a0dd42859273e51438ddde244b1179c175b38396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145564 Malicious code in nodejs-framework-taurus-pyxis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca5c47a0b91aef35c306426d598941c157a29b968536ca1515fea6acd250949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144239 Malicious code in lacerta-electron-taurus-triton (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3501f859a05328b94c7db37388565d928c8afc4f855f8c268ad98bef89a627ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in taurus-development-sirius-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be8b5020ffe59b7b9afc50b4ca06dc749d7ade12a8b455458bca24118978902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148467 Malicious code in taurus-development-sirius-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be8b5020ffe59b7b9afc50b4ca06dc749d7ade12a8b455458bca24118978902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148461 Malicious code in taurus-await-ophiuchus-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325598ed2d9b61f47852d3de88123386713e9c67d86f0f3ebaf6f8ff11aff1c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147980 Malicious code in sirius-taurus-achernar-dactyl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50c4cc6027074757c03a706abdd29d05f5adc28296556b0a8cff59c1b16c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in taurus-chakra-ui-quantum-webdriver-manager (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e6b7854d6337054e86865f3d0eeb753d04fc6c8d638b25c469819ce5daa294 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120084
Malicious code in zenith-eridanus-terser-webpack-plugin-taurus npm...
EUVD-2025-111874
Malicious code in lacerta-electron-taurus-triton npm...
EUVD-2025-122726
Malicious code in relay-auth0-taurus-async npm...
EUVD-2025-115529
Malicious code in ceres-taurus-quasar-mui npm...
EUVD-2025-122943
Malicious code in query-taurus-phoenix-chakra-ui npm...
EUVD-2025-124229
Malicious code in npm-taurus-canopus-electron-builder npm...
EUVD-2025-114429
Malicious code in docusaurus-taurus-ursa-loglevel npm...
MAL-2025-141680 Malicious code in docusaurus-taurus-ursa-loglevel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412a38780f9ef1235e40c5e9de72c1cafe180f43887db2c96e49230dbe5767f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...