73 matches found
Malicious code in library-biosignature-bionics-mocha (npm)
Source: amazon-inspector c195849028cdb53692f81b71f60bedc1c41ab1cbecd2d1f708262bccd1f04c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in less-loader-grus-void-biosignature (npm)
Source: amazon-inspector 99eb889dc1cf69b2085a517f688f0af0a888445aef6063056bcdef36537a018d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in jasmine-galaxy-biosignature-envconfig (npm)
The package jasmine-galaxy-biosignature-envconfig was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in higgs-biosignature-inflation-upgrade (npm)
Source: amazon-inspector 1f6af5f94c074749c796605831b304d3b23f9cd7ecd27b0771334f6c877a95bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in deneb-biosignature-taphonomy-glaciology (npm)
Source: amazon-inspector 826d1c2ca5b616a8f35e0fd137fffc6f302955dd4f7b5785761a78ec8078fb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cosmiconfig-biosignature-vulcan-pipe (npm)
Source: amazon-inspector 29ce7f915509c7a8c88af596b7966e3cc5162e9052c189cca1200adad502a9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in chai-node-sass-biosignature-tardigrade (npm)
Source: amazon-inspector 57811ff3009936e39a8aa148ef288a54279dba83243c7e753f89627af5afdb3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in centauri-protractor-biosignature-supernova (npm)
Source: amazon-inspector 739d1638844b716e95db11ffdb4027dd1942b8a1b956ef4531dcf9888bd02986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in celeste-janus-biosignature-radiometric (npm)
The package celeste-janus-biosignature-radiometric was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in archaeoastronomy-biosignature-phoebe-metabolomics (npm)
Source: amazon-inspector ae3533df6b043ad28180a290281fdd4efd39807074d439976564c2cd6580cc15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in antares-wavefunction-biosignature-magellan (npm)
The package antares-wavefunction-biosignature-magellan was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in antares-biosignature-titan-impulse (npm)
The package antares-biosignature-titan-impulse was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in aldebaran-biosignature-darkenergy-pavo (npm)
Source: amazon-inspector 86ea8e131d374cb063a0b842043d6ab3be61a8a7771fcf3a8ccd89092e836b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious Package
Overview higgs-biosignature-inflation-upgrade is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...
EUVD-2025-180053
Malicious code in biosignature-install-mocha-vortex npm...
EUVD-2025-180048
Malicious code in biosignature-spawn-slidev-envconfig npm...
EUVD-2025-179828
Malicious code in centauri-protractor-biosignature-supernova npm...
EUVD-2025-180050
Malicious code in biosignature-quasar-galaxy-charon npm...
Malicious code in biosignature-install-mocha-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e28139bf17900b26cfd1c36852cba7aaacebbeb146e4be1d8cbfd36b811698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...