11474 matches found
MAL-2025-144095 Malicious code in karma-build-sass-loader-kastra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a1706c5747b57ad2a3fafbe469c5561cf6c547799ef10865bda8f35e773b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149643 Malicious code in xenon-build-server-forever (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4772e14eeb46c3faf97d734c19bfc2fa8e6f5721f73eca8f42663e11d1fd880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142699 Malicious code in frontend-build-css-loader-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f3b812757c3e29f823e8d9b9e8e9f4a5b40ec2173f90d8a330a1d86980db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142688 Malicious code in framework-nuxtjs-sedna-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5259e841b741ad81487bbaa050e3336e687c0db66022001ceb0831d8feb00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146372 Malicious code in polaris-stop-build-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a373d1a5eb1fb842a336b3d3996d1ff50d85dbdbcf45ce246eec4e06c9cda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115906
Malicious code in build-wolf-kastra-lint-staged npm...
EUVD-2025-114663
Malicious code in dactyl-lint-staged-achernar-build npm...
EUVD-2025-111751
Malicious code in levels-slides-build-xanadu npm...
EUVD-2025-113127
Malicious code in got-rocket-build-callback npm...
EUVD-2025-120288
Malicious code in xenon-build-server-forever npm...
EUVD-2025-114358
Malicious code in dotenv-safe-elektra-build-octans npm...
EUVD-2025-112463
Malicious code in inquirer-lacerta-build-octans npm...
EUVD-2025-112018
Malicious code in karma-build-sass-loader-kastra npm...
Malicious code in build-publish-centaurus-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97fdf8cc707d1ad10e2072131e6414494e53de3f5aad8415866f852ad745ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123639
Malicious code in playwright-library-build-yaml npm...
EUVD-2025-115907
Malicious code in build-webdriver-mocha-ganymede-luna npm...
EUVD-2025-116087
Malicious code in betelgeuse-writable-grus-build npm...
EUVD-2025-115909
Malicious code in build-unuk-uglify-js-configstore npm...