310 matches found
EUVD-2025-114289
Malicious code in duplex-sequelize-blitz-odin npm...
EUVD-2025-116041
Malicious code in blitz-stream-less-yakutsk npm...
EUVD-2025-121876
Malicious code in socketio-draco-blitz-pavo npm...
MAL-2025-149466 Malicious code in wezen-redis-protractor-blitz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2bc1e5ca6a049543fd24582fa1c4ba546cf8bd1e58763bb26845e8445f48084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140064 Malicious code in blitz-thuban-mongoose-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a38b52da158ae13c533abaa878bd0546783bdc722f4e37c25cb1f7735c7199a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140048 Malicious code in blitz-koa-umbra-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737b7cf294e87c05036c5c575e26b364c9f2e68a45faceeedc422a66b098830d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149000 Malicious code in update-procyon-ophiuchus-blitz (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0ae1c5ac94da1bccd61aa20af4df863fe32433ee4bd8eae2921ec6d0e22556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140037 Malicious code in blitz-celeste-slidev-got (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42c639afb347d7ed48126244240c893feaf0e464a8b9357fc1bd5d35cf6d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140067 Malicious code in blitz-winston-vuetify-lyra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143770 Malicious code in jabbah-blitz-oauth-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945e0902b08e77257713b7316b3c50f0ce3c87d1e8804b22212a53021f2df88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144446 Malicious code in lint-staged-auth0-blitz-cors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9c67138ee808692160a48ef7c74837cf18dd944b8ded69410c71f20c4277864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149224 Malicious code in vulcan-blitz-got-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f3a91dd5ac69a536e196591b1be2a0ab84547b5642fb5b934f4f6ba732d14a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120779
Malicious code in virgo-blitz-dagda-babel npm...
EUVD-2025-112756
Malicious code in html-webpack-plugin-astro-blitz-procyon npm...
EUVD-2025-116053
Malicious code in blitz-leda-meteor-spawn npm...
EUVD-2025-123755
Malicious code in phoebe-oauth-blitz-playwright npm...
MAL-2025-148049 Malicious code in socketio-draco-blitz-pavo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180c7a73b5e53a5f51dde7e339af90597e7d2ba561bb2a7f5d61e4aa5b6accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147513 Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...