8064 matches found
MAL-2025-145654 Malicious code in nova-cli-cosmos-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140803 Malicious code in cli-magellan-farout-regulus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b527d8b5b28588d0d184165346d2df487d983e0a39decd2a1b463d5211ca4e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148156 Malicious code in spica-cli-heka-cressida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1283db4e16fe1d6642d68aea1d2f64f45a839f4b78e6f65fe2da51ee9ec9f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145431 Malicious code in nightmare-cli-ursa-phenomic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c815f45736f8f59bd1582476c431a200edfecc2b39875a5ab386550f4e203eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in husky-cli-axios-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3e3ac914740a1f8e6ac85c3136819adc22fbba0178c57d910ad1afc930d0768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115296
Malicious code in cli-supervisor-meissa-transform npm...
EUVD-2025-112699
Malicious code in husky-cli-axios-private npm...
MAL-2025-140812 Malicious code in cli-supervisor-meissa-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ded4cfab8e2f8639c75038f912fc662017e8aaf4dfc60ff97515f615d09a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120038
Malicious code in zephyr-resolvers-cli-concurrently npm...
EUVD-2025-120362
Malicious code in writable-izar-tool-cli npm...
EUVD-2025-115295
Malicious code in cli-ursa-lyra-middleware npm...
EUVD-2025-112437
Malicious code in install-europa-aquarius-cli npm...
EUVD-2025-111915
Malicious code in koa-odin-aquarius-cli npm...
MAL-2025-149569 Malicious code in writable-izar-tool-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b84bb1c43acd9f7be1bce6187dc6ca90f1e0eda7e28ed138936ede9ac43384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140503 Malicious code in celeste-cli-uglify-js-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed63cfb1fb82bc628b16d127c52caa67e626fb4c898671692e4b6fb1d5e614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144356 Malicious code in levels-markdown-cli-cosmiconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91e420dffdd3b632425f0ab36ce3acc96e1a91ca101b3bf8e554a24c98aa932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115300
Malicious code in cli-quantum-graphql-phoebe npm...
EUVD-2025-123667
Malicious code in pino-uglify-js-uninstall-cli npm...