257 matches found
EUVD-2025-120716
Malicious code in vuetify-loop-convict-run-script npm...
EUVD-2025-122060
Malicious code in sequelize-convict-wasat-antares npm...
MAL-2025-141540 Malicious code in deneb-convict-loopback-spica (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b47cb552bd2273944966f97cbddfb7938062c25b736c668a27c6a067a040ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146294 Malicious code in pm2-convict-lint-rimraf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3599bc1a7467d1187d95c87d1bf5167564ec62aaf91e11c17980fd31d2f03c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141074 Malicious code in convict-gemini-quark-command (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1105a5512cdb4ea28cb806f26bc05f275144f73d19090426faa14c19edd2fa63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115022
Malicious code in convict-rate-limiter-semantic-release-cypress npm...
MAL-2025-147466 Malicious code in rocket-fornax-capella-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8732fe50bec3c6b6e71c1fd8664ac16a6bfbc32a67a0b35570201c393fa870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141075 Malicious code in convict-hercules-comet-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5786dc2bd60bfdccbe5e268b683b5b9c3f489b85c479fa537c5154dedf4949d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141369 Malicious code in cygnus-html-webpack-plugin-convict-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a7c905e6d297a266e003ada74f2dd7959d66a6bba0eb74d4c082c443e0fdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148002 Malicious code in slidev-convict-heka-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e873458060196c11220fa6c0f0f376108963d72dc0968b8880d89d1c286153a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141087 Malicious code in convict-rate-limiter-semantic-release-cypress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699a64376c5c66937eacea59c9b1aed2fa6498e62068c77e5311cbefed085e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141092 Malicious code in convict-superagent-leda-titan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71af2c3d51c8ab2f3f8f9b9ea4a0bbf0fb1e52a90372ef96a0e8c2fabd93a69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139594 Malicious code in ariel-polaris-rimraf-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d7e5fe0b742c906a629ff41dcd30079db5c74b5bfaf1475bee365ca52b4acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141091 Malicious code in convict-sagitta-capella-remark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 243af60bcaefd4a2f191e0403851b712f8cbab97e1be2ea0df86e12c71b9d373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115031
Malicious code in convict-loopback-ganymede-meissa npm...
EUVD-2025-114341
Malicious code in dotenv-safe-parcel-convict-umbriel npm...
Malicious code in pavo-less-loader-convict-uglify-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99bd14deccdda00ebe2d12bd079dde2bd5bbe69e9bb4335c43239ee0a5abf57e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113681
Malicious code in farout-yonder-convict-iota npm...