3263 matches found
Malicious code in firebase-bootstrap-xenon-mira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0d3d1a15b135e8c44460a7dd13e05812078c6c8c9f084b23bc476a527c63226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115997
Malicious code in bootstrap-foundation-rehype-superagent npm...
EUVD-2025-123856
Malicious code in perseus-adonis-bootstrap-exec npm...
EUVD-2025-122863
Malicious code in react-bootstrap-europa-postcss-polaris npm...
EUVD-2025-121816
Malicious code in spectron-bootstrap-yaml-iota npm...
Malicious code in perseus-adonis-bootstrap-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9206394df2838ca6f7266532d7adf22db31c96e82344383f3159523e109e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147071 Malicious code in react-bootstrap-polaris-prompts-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ab5c4a923aa2e466ecbc96e0eac3c8a5009b0e4895c85f60cfa56187d7f5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112718
Malicious code in hugo-neptune-bootstrap-css-minimizer-webpack-plugin npm...
EUVD-2025-114256
Malicious code in eclipse-meissa-react-bootstrap-vortex npm...
MAL-2025-147054 Malicious code in react-bootstrap-docusaurus-release-it-wasat (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0995fe21961efede9dd77ca581d5867b77e1a82321014f9343117b49c54685e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122849
Malicious code in react-bootstrap-rocket-async-meteor npm...
EUVD-2025-114022
Malicious code in envconfig-wasat-bootstrap-rocket npm...
MAL-2025-140125 Malicious code in bootstrap-wezen-selenium-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba700325c0ec38a68b85c35f22e10add36f7773904e951906f066fd96e60c3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140113 Malicious code in bootstrap-link-pino-pretty-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b1ad1f4bd0a9eea1be9a5facc0abeb0284827a5e7994ce9dea62af1df74e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148159 Malicious code in spica-cypress-barnard-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6102adc00966ba285ca48a5b0c9ef6bedbd9b1c15e55c5c56f7a6b132206d191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147073 Malicious code in react-bootstrap-rocket-async-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6eed4998bf00e59d674933b76fbf9a1a5c4a158d6c5f0892cc4c658ac9d96f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140110 Malicious code in bootstrap-janus-spica-docusaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bb8df0cbaee112cc2fa35b1b834732111d81069400cdaf6f347189357c40e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140123 Malicious code in bootstrap-terser-webpack-plugin-winston-link (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4c70c900ce100fa38a9006c7544ae598fcfe7ee0b5907a4a48e068f95db4936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...