1243 matches found
MAL-2025-144469 Malicious code in lint-staged-ultra-vega-polaris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05255d72e8ae6e33299cdcb4fffa857c7f8faa9e68782e51c45a4fd800b36a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147523 Malicious code in rollup-plugin-ultra-ganymede-vega (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d84fda97f34b6e4d7fe644721804df274f83af37ded2fbe3c78cb14d629540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121993
Malicious code in shelljs-ultra-venus-stop npm...
EUVD-2025-122399
Malicious code in rollup-plugin-ultra-ganymede-vega npm...
Malicious code in ultra-dynamo-foundation-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b3b669ae32646ba1904a37fbdc812c5d0f58c8de7e5ea540f79e65395d1991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113995
Malicious code in equinox-acamar-ora-ultra npm...
EUVD-2025-112440
Malicious code in install-cross-env-ultra-radiant npm...
EUVD-2025-114748
Malicious code in csv-ultra-wezen-astro npm...
Malicious code in spica-slidev-ultra-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8279bbd45a36576c365070195f23b84851c549e19d14de6869131e7ad0555cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121033
Malicious code in ultra-gemini-miranda-antares npm...
EUVD-2025-123411
Malicious code in prettier-stylelint-mysql-ultra-winston npm...
Malicious code in node-sass-concurrently-markdown-ultra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecbf1725b1fe3550e4535c888b84b76843307d046713ddb77493b16889d15e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112465
Malicious code in inquirer-gemini-ultra-version npm...
EUVD-2025-112243
Malicious code in jasmine-ultra-magellan-cressida npm...
EUVD-2025-113107
Malicious code in graphql-loop-module-ultra npm...
EUVD-2025-122438
Malicious code in rocket-ultra-playwright-titan npm...
EUVD-2025-121023
Malicious code in ultra-postgres-publish-fornax npm...
EUVD-2025-114499
Malicious code in despina-ultra-antares-adonis npm...