535 matches found
Malicious code in rehype-winston-octans-pino (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35f91c97d70b21b2ab730a7e4c783098a6ee475dfc3913443291cf3a6f257c99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124775
Malicious code in mongodb-winston-jovian-eclipse npm...
Malicious code in winston-javascript-fork-pino (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31d8ef523f64895d99cdf3b37549e07b7ff03de07b73488c2b778f8569fd1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124352
Malicious code in nodejs-javascript-winston-aether npm...
EUVD-2025-114735
Malicious code in cygnus-module-browserify-winston npm...
MAL-2025-139258 Malicious code in airbnb-module-winston-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb5ec25abac37225c8be7b23ea2da3a0519e6735cddc384929b39303ffc3671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139746 Malicious code in auth0-event-winston-alphard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca62e2d6414ed0efda22dc45da9e9f2d5b43e9efcbfa092dd84761726126c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149479 Malicious code in winston-bellatrix-cosmiconfig-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bfc0a9d123c2f0452947c5293ca68f12066d3aed35fc561a356882b87baba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140181 Malicious code in build-altair-winston-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24932c776e1ae81f75ee25cc117faa978fce6270eb11033b71b6a84b645c6608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149536 Malicious code in winston-yildun-less-loader-dactyl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69a769cca21c2b2a2a822e2da066c9daed6de27648e615f57d6c614b2376b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149491 Malicious code in winston-eslint-config-impulse-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e28014350609d845e34791b1fe1bba9b422e05f529a3222c889802154906250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145736 Malicious code in oauth-nextjs-winston-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33e356c375a07eb1114356bc140ade2d78b93ddd6e18f333b96d5d5ba5afee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147195 Malicious code in relay-auth-cassini-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf7a75cf1af94a450e995779c3a4f00f61ffd14df9177e7fd4aea774699e5e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141374 Malicious code in cygnus-module-browserify-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825d606cbdefc2604cd66982e1a93ddffc1006cf27f427096225845d4e019fc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149523 Malicious code in winston-registry-miranda-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adc2ee2fc57b0b96c442dd9623b0bb7e158f3600ae026698c48e2cc04e98884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149535 Malicious code in winston-yaml-webdriver-mocha-repository (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2aafd2c598a36174246ed2a93655569ec5e247c8ea65d7573cc259e57155be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145555 Malicious code in node-sass-tool-resolvers-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9d82b37f041e55c54c357d2b3f2c7cac2a2ca7af9a206f536e6ad03b700b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144619 Malicious code in lyra-winston-nightwatch-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe6bca6a2e77e7c2a22c4bbeda5029b832f6a63e482c2177518ac885e4ecc49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...