86 matches found
EUVD-2025-179979
Malicious code in boson-hugo-cosmology-mineralogy npm...
EUVD-2025-175873
Malicious code in triton-subduction-darkenergy-boson npm...
EUVD-2025-178980
Malicious code in exoplanet-boson-readable-grunt npm...
EUVD-2025-178403
Malicious code in init-publish-boson-apex npm...
Malicious code in phenomic-avior-greatfilter-boson (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b201e815b3fed6dff5cf2c8c8dd8e975795b4c086f7ae845825da2bd13da55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176436
Malicious code in semantic-release-boson-lepton-kastra npm...
Malicious code in neptune-webdriver-manager-vuetify-boson (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffdfe1c67faa783eb8752ac15ac0a09ad0d5148686b1b4b60b2f6870e5e27a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179977
Malicious code in boson-style-loader-less-loader-superflare npm...
Malicious code in hexo-boson-charon-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56cd66ea725cf1761fe3250a133dfda961733f0870f716905609eae11f5f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187350 Malicious code in hexo-boson-charon-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56cd66ea725cf1761fe3250a133dfda961733f0870f716905609eae11f5f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186814 Malicious code in eris-callback-boson-cosmicsilence (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a197876be7cdffaa146516c71ade6fb43a8bf1e1cc1b4350b8a5ea0d8bb5a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185905 Malicious code in boson-style-loader-less-loader-superflare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2f50bd5b7c71fb5520c30b341fe247f8acbf2e602197b32e39a8de63489160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in winston-boson-publish-cluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5443c2030097f72cca3da1bb12aa17e11ac24d30b75d4b58b456b05ae958239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179981
Malicious code in boson-forever-leda-pegasus npm...
EUVD-2025-177888
Malicious code in mesosphere-private-farout-boson npm...
Malicious code in warp-boson-callback-supercluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95312546c36f2f246c3a72e1074b30f6d60280d986fd0cd2fc73fee683e7972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177922
Malicious code in mechatronics-boson-quasarjet-wolf npm...
Malicious code in biosignature-rollup-polaris-boson (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ee28aaf0ab1598c2cecd4a41de5df103b572fd7b814c701bf0175aa1cc32f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187386 Malicious code in hugo-nashira-boson-passport (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728679d568943b8e701a38466dcaf011a95064ea258b5e16ed806bdee8ef90f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...