2690 matches found
MAL-2025-141569 Malicious code in dependencies-hugo-phenomic-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0454cd7bff21becd48b42a36bec52d878743b10e639c0ddff5cea08ea8574357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141564 Malicious code in dependencies-comet-polaris-aurora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de32a2d0c01195e97714445a47d6e4fcb993f4ee8e1fb6d7442b5415df80ac0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141567 Malicious code in dependencies-equinox-despina-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c683b2a7d937899f8905e90cc2f46225ee2a5764154d6b399d88a67ce7d677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dependencies-sync-eridanus-bunyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aa69c1f04a21c437aa1c182048b5f6146d8ac5ee652093cdb056f483f5db7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113249
Malicious code in geckodriver-dependencies-ursa-thuban npm...
EUVD-2025-114534
Malicious code in dependencies-mongoose-markdownlint-global npm...
EUVD-2025-115644
Malicious code in cassini-dependencies-leda-sequelize npm...
Malicious code in antares-epimetheus-chromedriver-dependencies (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf16ba048e95255889c5ed8190c85f42d4544c094dfce96a156909536a2c8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114847
Malicious code in cross-env-optimize-css-assets-webpack-plugin-dependencies-nightwatch npm...
EUVD-2025-121602
Malicious code in stream-lint-magellan-dependencies npm...
Malicious code in cross-env-semantic-ui-dependencies-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6332d430064a3f2838ee485b692085966c87a656a847987e105921afff07be4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dependencies-restart-luna-regulus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac412bcd002439620e10259ac8707098741bbfe9441a469fef66f325e20ee8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dependencies-changelog-cosmiconfig-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84d9ea7b954795a472da77c59e5779afe513ebabc579db3051c8ccb635e1150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nestjs-dotenv-kinetic-eslint-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ec590f507986f683aab863db75e6bd4c52df9e191f65b55252813aa649ffbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in geckodriver-dependencies-ursa-thuban (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747f5a78aa88b271647ec42d1c0e8110c547dda2c176ce3acd506e7f4aae8be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111924
Malicious code in koa-dependencies-jabbah-telesto npm...
Malicious code in dependencies-lacerta-hermes-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c3892029c1b658f28fa5b4cc927adeb359d890e770612dd77011a83b270f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112252
Malicious code in jasmine-prettier-stylelint-dependencies-europa npm...