207 matches found
Malicious code in metalsmith-build-cressida-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5013b4dca24d60518ca66a9e686616355a3dfc7e97e90c957bcdd137193aa8da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112493
Malicious code in init-europa-cressida-yonder npm...
Malicious code in cypress-cressida-altair-odin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842e7486750904608a35c875cbb4bb1350cf6822adb65f1b079b7e699c06a659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nestjs-cressida-pegasus-toml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b69987b3b711712af2620dc816b97bc32e9d6c0e4bf7a77624e4b559718a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148156 Malicious code in spica-cli-heka-cressida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1283db4e16fe1d6642d68aea1d2f64f45a839f4b78e6f65fe2da51ee9ec9f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147584 Malicious code in sagitta-cache-cressida-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6d33074d4639687ea4dc27c8f8a6f47a6cbd64b890cab5d26eea38f2de19bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140381 Malicious code in capella-changelog-cressida-jabbah (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9e9e3261268abc9d9f358e046c33a68cbf459c83bb26bf4bde323534143ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120444
Malicious code in winston-cressida-pino-pretty-quito npm...
EUVD-2025-112046
Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida npm...
EUVD-2025-114613
Malicious code in deimos-hyperion-cressida-deimos npm...
EUVD-2025-114618
Malicious code in deimos-cressida-kronos-stop npm...
EUVD-2025-121146
Malicious code in transport-cressida-sadr-sadr npm...
EUVD-2025-115547
Malicious code in ceres-cressida-lacerta-foundation npm...
EUVD-2025-114868
Malicious code in cressida-repository-mutation-thuban npm...
EUVD-2025-112978
Malicious code in halley-cressida-gacrux-hyperion npm...
EUVD-2025-114867
Malicious code in cressida-scorpius-prettier-plugin-markdown-ursa npm...
EUVD-2025-113368
Malicious code in fusion-publish-nightwatch-cressida npm...
EUVD-2025-114878
Malicious code in cressida-exec-element-ui-farout npm...