21022 matches found
MAL-2025-119913 Malicious code in fadhil-soto8-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 847a75231f1c6c6eaf0a6cb4455436028bd436bb24c997277911676a60370cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rifqi-empal30-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569f209dec545b65c6d48af1b4535fbb99a04899ec1c2470f1281d52684b5b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-64687
In JetBrains YouTrack before 2025.3.104432 improper access control allowed modify MCP tool logic...
EUVD-2025-76155
Malicious code in obedientspider-tool npm...
EUVD-2025-75980
Malicious code in pregnantboar-tool npm...
Malicious code in widespread_bobolink-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12676b5ca8f737dff742d5a8a67bd6679d4d38f7fbc1b8e69e7fa3267c225d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in garduup-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8584f5c4ea73be1cb26aecedf5ee168a7dda217898e98c7d69d155385fe98db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75501
Malicious code in superiorvulture-tool npm...
EUVD-2025-75235
Malicious code in weakswordfish-tool npm...
Malicious code in bored_bird-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6545fe9ba2a5e4fe4b42d1339a3cfb21e748d25d398f8b9aedf57dee3bdc8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75866
Malicious code in rattyape-tool npm...
Malicious code in husky_bobcat-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3601e920ffd49c7f3d59fc9ce0d8935b5eb3b4c8eb1c5ca1f876a2e8dbec0da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75602
Malicious code in smilingspoonbill-tool npm...
Malicious code in gardumdfk-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c9f914dce691dda58af651d5983159235c7e093e07be474a2261f58cf6f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mad_hyena-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfda6716a0350135771e3c31b2ed8c3a8f33534858aa034a491960d40c1616e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mobile_frog-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nutty_meerkat-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3abb15454aa46416fee872303c6f3a4120561c0ebede87b5fa24fa5a27e35efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75829
Malicious code in remainingparrotfish-tool npm...