BIT-NGINX-GATEWAY-2021-3618

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic fr...

EUVD-2025-117161

Malicious code in private-violet-alpaca npm...

EUVD-2025-103395

Malicious code in obedientalpacaz3n npm...

EUVD-2025-104082

Malicious code in littlealpacaz3n npm...

EUVD-2025-106346

Malicious code in boredalpacaz3n npm...

EUVD-2025-95088

Malicious code in silkyalpacaz3n npm...

EUVD-2025-106244

Malicious code in changingalpacaz3n npm...

Malicious code in identical_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 145f95f5a55a303acf898b70ba3061882d632019e27c143439902615b2979551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74232

Malicious code in smoggyalpacateal-48 npm...

EUVD-2025-76722

Malicious code in greatalpaca-silentdev npm...

EUVD-2025-76874

Malicious code in fatalalpaca-gooddev npm...

EUVD-2025-75606

Malicious code in smartalpaca-appteadev npm...

MAL-2025-108857 Malicious code in smart_alpaca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77d4319d72fb4e34ae2a67e415f75137a1d8f6dae2110c2460f1f01f1a8eb66c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75624

Malicious code in slightalpaca-biggestdev npm...

EUVD-2025-76572

Malicious code in independentalpaca-appteadev npm...

EUVD-2025-75514

Malicious code in successivealpaca-notthedev npm...

EUVD-2025-77542

Malicious code in productivealpacaaquamarine-22 npm...

MAL-2025-108509 Malicious code in selective_alpaca_violet-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ab4287c079843020a63b68a1e83e46b13ffcfa11c3ca71a641c77ad2a01e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100867 Malicious code in conservative_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e587d82e290763eced0dd0761cf9e2927a8b493b188e56f332d344468c0f2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102808 Malicious code in flaky_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707c1f7e1dc5bed0bd93a96912cbeb2909be878be09de8f95375af471cfdec01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...