25482 matches found
EUVD-2025-121065
Malicious code in typeorm-unuk-dotenv-cache npm...
Malicious code in library-zenobia-native-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9620d5a9059a59c24af888f0c640dcbdd31ad3e5c571b59e3b1c48a9264c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aether-cache-telesto-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e127d6250ab54fadb00fbe77c714949f9d236ce7d2419068de687c499e213ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115819
Malicious code in cache-wasat-kronos-websockets npm...
Malicious code in soap-sass-loader-sirius-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c32a09e8e53f322f5f79220d387b7048fd9677cf8dcdbd54dacdef9d18be785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120778
Malicious code in virgo-cache-chai-spectron npm...
MAL-2025-142725 Malicious code in fusion-cache-nightwatch-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e621eb24b99727465fefb65412655e97619b9b87c2400a9d7bbea63db7163d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143246 Malicious code in helmet-cache-galaxy-alphard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6add171345211d071a5d346b6853f2ba78d089ff05584c0fe992c0bdc87d2b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143357 Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144408 Malicious code in link-gravity-cache-lyra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb48ae50821c55007a4579308b3d0c1e0ab08fef7b5c78d81a107f08d1b8512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142783 Malicious code in gacrux-style-loader-cache-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d40fb9bebd1cbc783338d691aedf1b17a93524a2990ac15451501b00098fb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140276 Malicious code in cache-mongodb-oberon-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e800145a0cd744f6884e1491601dd0d0e4bb5235ae6f74b6e7ec2fa7f61cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147584 Malicious code in sagitta-cache-cressida-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6d33074d4639687ea4dc27c8f8a6f47a6cbd64b890cab5d26eea38f2de19bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147937 Malicious code in sirius-cache-jasmine-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f0b886a8e9060a0198b0def36f25a5f7eadc58dbcf81abbf26dc31ece86a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139394 Malicious code in antares-cache-mira-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a06fcb11ea86032290dda80052d64d12f5c4aa1efcd8a73ce4ac81ea8c6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142369 Malicious code in express-cache-delphinus-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17dc1e6ba2a45dc12dceb87e28914ac9cd5001e8b6b6191cdd71a441cb055f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111393
Malicious code in markdownlint-cache-kastra-webpack npm...
Malicious code in cache-auth0-ceres-yildun (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef0aceae319d91d9ce1a3007bdbf7f467f94b6911605406bf858258ecc79e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...