407 matches found
Malicious code in fusion-xerxes-comet-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf07766d12753bced2182938a506ecdf512d8e1d4fb358d5195008a425611e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120663
Malicious code in warp-comet-csrf-slidev npm...
EUVD-2025-115577
Malicious code in centauri-enceladus-playwright-comet npm...
MAL-2025-144762 Malicious code in mdx-comet-vortex-karma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114175
Malicious code in elektra-acamar-equinox-comet npm...
EUVD-2025-115219
Malicious code in comet-proxima-csv-release-it npm...
Malicious code in wolf-comet-fetch-aether (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cb2cd055ee7e7789085864d11a9b77d1aab75944129455913dabd8cf582247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aether-achernar-comet-pyxis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8eeb0d0bb8f97673b41dc8aee57cff7bb2a8e7f779b5445b1c56ba83a5e61e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112146
Malicious code in json-centaurus-yakutsk-comet npm...
EUVD-2025-116126
Malicious code in betelgeuse-enceladus-comet-geckodriver npm...
EUVD-2025-122910
Malicious code in radiant-comet-module-gulp npm...
Malicious code in xanadu-comet-nodejs-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c8b88537d70aec0a919a25e1ff2865a738eec203cf17419753dbc477806aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115230
Malicious code in comet-kaus-mui-rocket npm...
Malicious code in bootstrap-comet-convict-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1090d16dc37057a5852adbfd5f493146d23a9dde058a92e0f5e68cf23ffbe844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113853
Malicious code in europa-atlas-despina-comet npm...
EUVD-2025-115216
Malicious code in comet-tailwindcss-inquirer-ultra npm...
MAL-2025-146829 Malicious code in pulsar-envconfig-nuxtjs-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5761e39a013fd801c9b8b331b1236d5d62883889f8f9ea1c653bea70859836e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious Perplexity Comet Browser Download Ads Push Malware Via Google
Attackers are exploiting Google Ads with fake Comet Browser download links to spread malware disguised as Perplexity’s official installer. The campaign, tracked by DataDome, has ties to DarkGate...