271 matches found
EUVD-2025-120181
Malicious code in xo-ignite-canopus-dagda npm...
Malicious code in xo-ignite-canopus-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0bce8256cc0e9ce5e492f8beca90f5cdb3cd66079b137e9c3bf0ea299205d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dagda-forever-proxima-carpo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a695226dc0058df094f2a9e0bbd11960f1e6da96d66c47fa2c8d9bf1578fd334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115675
Malicious code in carpo-blaze-dagda-command npm...
EUVD-2025-124500
Malicious code in nextjs-phoebe-commitizen-dagda npm...
Malicious code in dagda-ora-vortex-rigel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408661f6f10e82b3a08fe5c7bd69d8b2fad5a5b6689b808f8b9c3a847c7f9573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124664
Malicious code in mysql-meissa-react-bootstrap-dagda npm...
EUVD-2025-116044
Malicious code in blitz-pulsar-bootes-dagda npm...
EUVD-2025-120589
Malicious code in webdriver-mocha-airbnb-dagda-oauth npm...
EUVD-2025-114099
Malicious code in eleventy-remark-jwt-dagda npm...
EUVD-2025-115748
Malicious code in canopus-config-karma-dagda npm...
Malicious code in andromeda-dagda-mui-xenon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e6d7338006e8c1b1737fa69cdb4322505b94d628c9feb9845f90dcbeadef22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122161
Malicious code in sedna-cypress-dagda-slidev npm...
MAL-2025-144737 Malicious code in materialize-css-loader-install-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b13edd62a1c3d497a562a02de2b3cc6d3576b08b3540dc41d920894af98afd1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141472 Malicious code in dagda-hydra-centaurus-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b352e297554fe9236e9e8e02de5c22194bdced5da448b3c8ffe0d6a8e855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140358 Malicious code in canopus-config-karma-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2895038fdbbb1d7ed4a9e86b2391fd50d2cca0ca675432738eca6383610026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141840 Malicious code in dynamo-spectron-proxima-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a131a162085ca31baa40fc2176a41a7f97bf253d7f5f8400d421f53e5d52a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141478 Malicious code in dagda-nodejs-magellan-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792a64ac652bb6ab18229a861d7f5b30e92db6d2015ab8974b4e844b2e63c799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143900 Malicious code in jekyll-dagda-google-cross-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51efc8bc5dda4bb97100bc40fad173c85b4a3de359dd0858a8644cfa6de99b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...