50 matches found
Malicious code in ichnology-phylogenetics-cosmicweb-yaml (npm)
The package ichnology-phylogenetics-cosmicweb-yaml was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in got-cosmicweb-canopus-halley (npm)
Source: amazon-inspector 4b583c4c57856c012b65646066ece5cffd3db1a2c3206c475e5c74ad3d81bd04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in exec-less-request-cosmicweb (npm)
The package exec-less-request-cosmicweb was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in epimetheus-sagitta-cosmicweb-dactyl (npm)
Source: amazon-inspector 90bc7aa72b27d6ff25deddb6571fb73ec8eb566c3846eddf42956cf6fb0fa976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dotenv-jasmine-cosmicweb-stream (npm)
The package dotenv-jasmine-cosmicweb-stream was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in development-postcss-loader-webpack-cosmicweb (npm)
Source: amazon-inspector fdc7d279a0f29b5bca794be3e6921a4e2c28a76db57e85d79fa4f0cca9313cb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in dactyl-chalk-mui-cosmicweb (npm)
The package dactyl-chalk-mui-cosmicweb was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cosmicweb-browserify-duplex-ganymede (npm)
The package cosmicweb-browserify-duplex-ganymede was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in cosmicweb-miranda-xerxes-uglify-js (npm)
Source: amazon-inspector 689b4bd5f9f10e90e5f9194bbc308daef426c25ab1ef6f1682b3006735701711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cosmicweb-sedimentology-ignite-library (npm)
Source: amazon-inspector 244a8086b97b3e59695f91b83a0a171f8762ba34756d6ee338d98344eb1b1b05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cosmicweb-leda-sadr-reveal-md (npm)
Source: amazon-inspector 270c6cc6b73cca0763aa3fd40890eb81c4f654188eaf7bb4cd3ceb9ded2f43e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cosmicweb-antares-lithosphere-phoenix (npm)
Source: amazon-inspector 0506cb2e0e182f936ec1b74d381874e93fb15d69cc3a6e7245f53e539eba8e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in astrochemistry-rigel-csrf-cosmicweb (npm)
Source: amazon-inspector f9f027fc727518cbd92b007991e867d7d29f9c618a13fd3ea489d583fcc7e911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious Package
Overview ichnology-phylogenetics-cosmicweb-yaml is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
EUVD-2025-177690
Malicious code in nconf-middleware-extremophile-cosmicweb npm...
EUVD-2025-177454
Malicious code in on-quantumfoam-nebula-cosmicweb npm...
EUVD-2025-179540
Malicious code in cosmicweb-leda-sadr-reveal-md npm...
EUVD-2025-179541
Malicious code in cosmicweb-antares-lithosphere-phoenix npm...
Malicious code in nodejs-cosmicweb-chakra-ui-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93a5092226cfdaec9107ff680820108c965f38859cd60ac2915fa0552cf83dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...