15966 matches found
MAL-2025-140503 Malicious code in celeste-cli-uglify-js-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed63cfb1fb82bc628b16d127c52caa67e626fb4c898671692e4b6fb1d5e614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rollup-spectron-acamar-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8656fd896287bd8c9d143d4a1422fefe39929d2ccb75fa57c25ba1c57a304b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145431 Malicious code in nightmare-cli-ursa-phenomic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c815f45736f8f59bd1582476c431a200edfecc2b39875a5ab386550f4e203eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121769
Malicious code in spica-cli-heka-cressida npm...
EUVD-2025-115290
Malicious code in cli-zephyr-pegasus-commitizen npm...
MAL-2025-145540 Malicious code in node-sass-gacrux-venus-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac146f9fa66bd3b7933e6bd605cac605da91e1f8367be1ef65777d7ebaec84b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115304
Malicious code in cli-node-config-eridanus-dione npm...
EUVD-2025-122460
Malicious code in rocket-astro-cli-zenith npm...
EUVD-2025-115264
Malicious code in colors-corvus-postgres-cli npm...
Malicious code in rocket-astro-cli-zenith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c472ed77c736a9963eff49b3598afb091fc41500d7bc9f3cbff19ef5c0966701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115322
Malicious code in cli-axios-kronos-ophiuchus npm...
EUVD-2025-115295
Malicious code in cli-ursa-lyra-middleware npm...
EUVD-2025-120362
Malicious code in writable-izar-tool-cli npm...
EUVD-2025-122129
Malicious code in sedna-socketio-cli-scorpius npm...
Malicious code in cli-lynx-nova-element-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e0af512198e413bd0da9e0fbed417f8a39382fb085a429d28eaec3405abc38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115323
Malicious code in cli-auth-elara-sedna npm...
EUVD-2025-115300
Malicious code in cli-quantum-graphql-phoebe npm...
Malicious code in zephyr-resolvers-cli-concurrently (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c010e7aa179a021023ded32a1531ca34e4cd286c20d4e8b50aca8afa148a3ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...