624 matches found
MAL-2025-142866 Malicious code in geckodriver-hyperion-aurora-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298930ea874b7fae8089492be4a1a76825be6ba2b6aee39441fea337706f9213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149231 Malicious code in vulcan-eslint-plugin-aurora-deneb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dfbca6d0d69647c5f5463eab5bb90e64d9e2b01eae0083cd94d966cfe894c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mira-aurora-jekyll-radiant (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c37198abfa595ebad14a4918dff72d195729333be2f1385ab33554a1a5bbf5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in janus-server-aurora-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ae2daf5864f511b2fd8658d01350244d0ae648e11c6aab4d1f206632120899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in testcafe-scripts-aurora-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c2116a7fd36b06664e2ff05d077433bce5510c5ca44040ecff506953e10843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116786
Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus npm...
EUVD-2025-113624
Malicious code in firebase-aurora-neptune-writable npm...
EUVD-2025-114616
Malicious code in deimos-graphql-procyon-aurora npm...
EUVD-2025-121323
Malicious code in testcafe-scripts-aurora-winston npm...
EUVD-2025-114248
Malicious code in elara-aurora-yaml-ophiuchus npm...
EUVD-2025-114545
Malicious code in dependencies-comet-polaris-aurora npm...
EUVD-2025-111780
Malicious code in less-loader-stream-publish-aurora npm...
EUVD-2025-116390
Malicious code in aurora-tailwindcss-nodejs-lynx npm...
Malicious code in less-loader-stream-publish-aurora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b87848632542c547d5ecef043ccf837f25736a226b95c2f670c701032a0ebabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aurora-chai-csrf-mocha (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e4dc3022282cffa8ced96920d3d0caeb5bb7cc58760e52b23ba6bf5e3742c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vulcan-eslint-plugin-aurora-deneb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dfbca6d0d69647c5f5463eab5bb90e64d9e2b01eae0083cd94d966cfe894c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113064
Malicious code in gridsome-optimize-css-assets-webpack-plugin-request-aurora npm...
EUVD-2025-116398
Malicious code in aurora-perseus-publish-protractor npm...
Malicious code in neptune-aurora-backend-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfb10cac4b5a1dfb6a498b2742fde2ada9966efaa48a9f65f9142d0b3af950b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...