1253 matches found
MAL-2025-189932 Malicious code in thuban-charon-uninstall-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 743ae6cbbbc27159bd1e3230d2f79754bd82c0b625304d5cc5285d043d6b7002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
CVE-2025-5317
An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac BEST before 7.20.52.200087 allows local users with administrative privileges to bypass the configured uninstall password protection. An unauthorized user with sudo privileges can manually remove the...
EUVD-2025-123043
Malicious code in pyxis-juno-uninstall-gatsby npm...
Malicious code in procyon-izar-uninstall-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c6818e6c6dfe07a4bcc8f47737bb84825b4cf9b6ae3355816cdb6d9d6dabee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115418
Malicious code in changelog-uninstall-mensa-vulcan npm...
EUVD-2025-122980
Malicious code in quasar-ceres-morgan-uninstall npm...
Malicious code in xanadu-electron-uninstall-zenobia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0597b15a125f89f0a8bfef840956f33b02adcc1c53efbe7055a7739d69bb71f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112704
Malicious code in hugo-uninstall-event-global npm...
Malicious code in parcel-chariklo-uninstall-regulus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7a1b13b8d6e0e8c05215c12ec51bb034a48d28a92164cfa19cddfc7a326a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in changelog-uninstall-mensa-vulcan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd5b870f472128e8da885cd3ecd401a1e405b9ad6dfd3cd561535ee6b6707e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121627
Malicious code in stop-magellan-uninstall-ariel npm...
Malicious code in tool-nconf-uninstall-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5451848821f91944130f40d2773f898a24946c94bc868c73c1fea30875de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gravity-sadr-uninstall-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9d8976e1d73cf0d12e60f81cef1c9e6aa3b1a3299233311e4f1f37ab133c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121232
Malicious code in titan-uninstall-zenobia-child-process npm...
EUVD-2025-123827
Malicious code in perseus-less-loader-uninstall-enceladus npm...
Malicious code in webdriverio-pino-uninstall-atlas (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eca553956144a6de60b33e12b7d4ebf483c39d114fdef6305308ea3dea7c685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123795
Malicious code in phenomic-ceres-uninstall-nodemon npm...
EUVD-2025-112423
Malicious code in install-uninstall-mira-sass-loader npm...