2581 matches found
MAL-2025-141576 Malicious code in dependencies-neptune-update-supervisor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397b34418700a7519cb7464e8e06f7903ea7fc035617ff240992e51e6953896e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143109 Malicious code in gulp-avior-dependencies-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bbb8705b693d6d52006ef9114367afd014aed87916df93c9cc58b8bc8689ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141564 Malicious code in dependencies-comet-polaris-aurora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de32a2d0c01195e97714445a47d6e4fcb993f4ee8e1fb6d7442b5415df80ac0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142863 Malicious code in geckodriver-dependencies-ursa-thuban (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747f5a78aa88b271647ec42d1c0e8110c547dda2c176ce3acd506e7f4aae8be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142176 Malicious code in eris-meteor-dependencies-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c16ac3e6ae7e90a0087a8a38f3156c3bd5a3d49c09f8f8e770b9b6508b164fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113934
Malicious code in eris-meteor-dependencies-halley npm...
EUVD-2025-122692
Malicious code in release-it-phoenix-node-sass-dependencies npm...
EUVD-2025-113179
Malicious code in global-eris-dactyl-dependencies npm...
EUVD-2025-111641
Malicious code in lint-standard-dependencies-meteor npm...
Malicious code in cross-env-semantic-ui-dependencies-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6332d430064a3f2838ee485b692085966c87a656a847987e105921afff07be4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in geckodriver-dependencies-ursa-thuban (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747f5a78aa88b271647ec42d1c0e8110c547dda2c176ce3acd506e7f4aae8be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123603
Malicious code in pm2-zenobia-dependencies-phoebe npm...
EUVD-2025-115338
Malicious code in chromedriver-equinox-websockets-dependencies npm...
EUVD-2025-114523
Malicious code in dependencies-thuban-gulp-command npm...
EUVD-2025-121602
Malicious code in stream-lint-magellan-dependencies npm...
Malicious code in dependencies-sync-eridanus-bunyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aa69c1f04a21c437aa1c182048b5f6146d8ac5ee652093cdb056f483f5db7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dependencies-jovian-bellatrix-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4193ad1c539fe1ae2c569013d91c8c6e73dbdebc46063d995a5035432074d530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dependencies-changelog-cosmiconfig-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84d9ea7b954795a472da77c59e5779afe513ebabc579db3051c8ccb635e1150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in commitlint-dependencies-loopback-proxima (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aef012a555af886c0bacf11d142271509bea1aa08ebcf5f1b0cc1c4e895b26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...