407 matches found
MAL-2025-147364 Malicious code in rest-rimraf-auth0-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308cc6969d5c0fd9d5fb4f300fda62ca7b42b335cd50278fad17ece90c2621cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120388
Malicious code in wolf-comet-dotenv-safe-element-ui npm...
EUVD-2025-113648
Malicious code in figures-comet-markdownlint-markdown npm...
EUVD-2025-113604
Malicious code in firebase-playwright-comet-nodemon npm...
EUVD-2025-115223
Malicious code in comet-parcel-perseus-postcss-loader npm...
EUVD-2025-116740
Malicious code in altair-radiant-comet-schema npm...
Malicious code in altair-playwright-webpack-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff48dcf02a3092ea74936fd4d768da0bd9ac52d2f1244f4a15fb194cc208d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116172
Malicious code in bellatrix-comet-spica-nightwatch npm...
EUVD-2025-115236
Malicious code in comet-cors-procyon-rocket npm...
EUVD-2025-114424
Malicious code in dorado-comet-cypress-ursa npm...
EUVD-2025-122646
Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork npm...
MAL-2025-141687 Malicious code in dorado-halley-comet-dynamo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61971e696f00e0b15ae7dbd87ae429aed772439dfcd64995928df915731a459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142468 Malicious code in figures-halley-cygnus-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bfdd47cd57e9ec30a9e0daefae6dced0d48b8bcdec9c70ebcd41b4bf6f3247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148237 Malicious code in sqlite-release-it-markdown-pdf-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842ed031476eaff919d2d36c6140df2eafe2aeee5855db59ed82f3128eebfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140336 Malicious code in callisto-jsonp-avior-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908f11f5f4c7839935f96d8f7d7c73ab4922cf0177174f9d9d4877093b50f428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in procyon-chakra-ui-comet-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b714a9f6285ba1b2dd437b87474dc7b762e38cfcf30a34ac0c236b9fa33d42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147012 Malicious code in radiant-comet-module-gulp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b564dfdedf86f43133b6b49d91c9d6a147c38582bf8da887f6659f1c566f0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in comet-vulcan-mdx-pino (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f65149a14d2b9622e50849679ec66950763e1cd38846e1c80e2e13fae21197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...