120 matches found
Malicious code in liquid-gray-booby (npm)
Source: amazon-inspector 01d834d91667d7e0be6a27fc68abdee1ce8dd540758dbe13576e46d15f96892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in legitimate-plum-booby (npm)
Source: amazon-inspector 34316396a69800220e795329b8151372648502e500ed8bd6428d809f43aa83ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in international-amaranth-booby (npm)
Source: amazon-inspector 64acf5ad6a0f907676e6e78184a5888e898f62a99afc79b6a09336e7615b8aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in influential-violet-booby (npm)
Source: amazon-inspector 6d2e973386fac45f025643cc93a706ddda407fd052dda0271877909cd4e233a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in improved-yellow-booby (npm)
Source: amazon-inspector c1dee708b72007ae81d4c195984d449a2d1d90e946ea51e149509d98652839f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in hidden-purple-booby (npm)
Source: amazon-inspector 94e5c20585cfa09363ba509137da16ed7ac133a76508c90d9e0ff055c093d52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in embarrassed-peach-booby (npm)
Source: amazon-inspector e57fe39cd16157d858394cbdcc95cd84c1b86b199dcdce7a2fa75c38c28906e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dry-peach-booby (npm)
Source: amazon-inspector 8bbd81cfa0a7be6a725480beb606ea3136d08a613dc4cfb77eb0174f26a5d479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dependent-black-booby (npm)
Source: amazon-inspector 7e81c883be00c141542889518096c330e3efeb5bfe160578795164a3bb73037d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in common-crimson-booby (npm)
Source: amazon-inspector d2d39a247ace562fd0663112b6e16333610e748e762b8e554880ff3c464d3ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in awkward-cyan-booby (npm)
Source: amazon-inspector 071fa5e634c5aacf6f1134c46a683e2ccccf52590fd46fb051c4217cd832e790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in aggregate-rose-booby (npm)
--- Credit: OpenSSF source...
Malicious code in above-coral-booby (npm)
Source: amazon-inspector 94f958d802d0caf0247d0d428a9e894339711c5af5a790a45d9e9d7a082b14bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet
A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a distributed denial-of-service botnet for roughly two weeks in May, according to new research from JFrog. The packages did not go after the developers who might install them. The operators used the...
EUVD-2025-117289
Malicious code in international-amaranth-booby npm...
EUVD-2025-117183
Malicious code in other-plum-booby npm...
Malicious code in loyal_booby_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9697e97da4254e03b70bdde7dde756c4691f1c42f5a7e975f9d7cbc7a2d212a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-96695
Malicious code in luckyboobyz3n npm...