309 matches found
MAL-2025-149187 Malicious code in vortex-phenomic-schema-blitz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5d533291b2ed88674d84856e3b9d0ddf9b1420895789b87beb95ea87124916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116057
Malicious code in blitz-fork-umbra-toml npm...
MAL-2025-140041 Malicious code in blitz-cross-env-ini-electron-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6aac823acd3e3c267be48e988aa756d7993859affa2c0bcf864a109ee1f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111166
Malicious code in middleware-blitz-mutation-transform npm...
EUVD-2025-114684
Malicious code in cz-conventional-changelog-nashira-blitz-terser npm...
EUVD-2025-116038
Malicious code in blitz-thuban-mongoose-janus npm...
Malicious code in blitz-thuban-mongoose-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a38b52da158ae13c533abaa878bd0546783bdc722f4e37c25cb1f7735c7199a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115778
Malicious code in callisto-cygnus-supervisor-blitz npm...
EUVD-2025-111491
Malicious code in magellan-blitz-atlas-child-process npm...
EUVD-2025-116035
Malicious code in blitz-winston-vuetify-lyra npm...
MAL-2025-144624 Malicious code in magellan-blitz-atlas-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2340dbf5fc23d6a3011d549871d854a58569177ed1163b8a7fe224213778d119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114365
Malicious code in dotenv-safe-astro-supervisor-blitz npm...
MAL-2025-149850 Malicious code in zenith-fornax-nodemon-blitz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c233eed913a5955494e36e35b177d30b7e2e149fb6783776be8bba88cdb4ceed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147217 Malicious code in release-it-blitz-colors-protractor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7be65363828d3ccac66faaf2be15e85858adb30d104154beaf697d65e0a711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141938 Malicious code in elektra-blitz-development-rocket (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db17c3573c2afc48e71e8d7d0defeea06ca90a04b2e4462187b50a5d95159e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143989 Malicious code in jsonp-blitz-cordelia-less-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9a2d48029e6469105d9d04046b04f81c2e0c08dcaad383e50ec9eb573552b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146758 Malicious code in public-eslint-plugin-blitz-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029711b6c1419843233976b2871a18f1474bd5661d211e4e8e33df63581d8250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143111 Malicious code in gulp-blitz-radiant-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2272dce106a80652d7130e9f69d1980ddc9bc530edc7cba63e8fee9d913ef8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sqlite-stop-blitz-morgan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8827208887d475e0e416b194ba336bf49e238e51cccf1d36e5c344c213c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...