188 matches found
EUVD-2025-116016
Malicious code in bootes-npm-nightwatch-despina npm...
EUVD-2025-116019
Malicious code in bootes-magellan-yakutsk-spawn npm...
EUVD-2025-113332
Malicious code in gacrux-publish-tailwindcss-bootes npm...
Malicious code in telesto-sails-bootes-standard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d609428dc28221939fc9494afcdd831c1230dcb226b52ce23422c34b259723c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bootes-despina-capella-pavo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23d6d6dd2fd50fbfb69d2a5c2e9d2d735e5bce93f882407139e9ebc1e18f011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123693
Malicious code in pino-orbit-bootes-janus npm...
MAL-2025-145992 Malicious code in pavo-bootes-capella-meissa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd6ede5dbb0e04dcbf0377128efc1b0a5de122059b8148a2c1126144de4294d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144349 Malicious code in levels-bootes-charon-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6250de6f7530c83732e5500e5ff0844acc606c31046c38698aa8affb35a28ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146440 Malicious code in postgres-neptune-bootes-query (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe1f7cc57e5378ad22e5eddec6f8f07092ecffa0c918b156ad32967ae2ea0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142435 Malicious code in fetch-bootes-concurrently-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73770f8dd611198563c5d0eae11af04fd9b01fbc2d8ab53e3b77989f6c6ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140088 Malicious code in bootes-postgres-module-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87297a5860fcee5829f7e212c41486ad5a4a23f21ca3ba580b5af5d2b4bc41ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147357 Malicious code in rest-nebula-apollo-bootes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0e592212057e4f165a5bc594516e43446e0dd16e1cd02b54fffe7ff5314842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140077 Malicious code in bootes-docusaurus-europa-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57738b105027f69248fd944434baeaa2ed746a584c2111cbd47f4dfe1303e997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140092 Malicious code in bootes-stop-transform-kronos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113278
Malicious code in gatsby-bootes-aurora-aquarius npm...
EUVD-2025-114575
Malicious code in deneb-bootes-postcss-webdriver-mocha npm...
Malicious code in meissa-cordelia-ursa-bootes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131c53abda90b59bac2d95c26135113d7fdc21f8cd455eef5df21ac017aa8f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112147
Malicious code in json-bootes-spectron-pegasus npm...