9821 matches found
MAL-2025-143315 Malicious code in hermes-development-virgo-promise (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b9ebfa206b435c81a56d67d919dc4e28ddfda901b05abe2419b067e8de16f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111395
Malicious code in markdownlint-antares-development-nuxtjs npm...
EUVD-2025-111972
Malicious code in kaus-elara-relay-development npm...
EUVD-2025-111945
Malicious code in kinetic-development-mdx-eclipse npm...
Malicious code in development-kaus-axios-ignite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7f9e940d8b489a1c7d65f3dada82da97fdae00577eda2b6069959b4bd015d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in development-polaris-lint-staged-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b2c638e326aa053f682240e547e9f90a7b769046b2d21739ef3ca2efad26ca1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in development-ursa-upgrade-kaus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30680c255c5f3e7ecffae70aeefb414136fe73f579ae9000f512d779efa522f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in development-version-schema-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2586cf4822cda61df50eb0bfa4582629e0cd68ad53f04da400f1d2d3850cd2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in elektra-blitz-development-rocket (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db17c3573c2afc48e71e8d7d0defeea06ca90a04b2e4462187b50a5d95159e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in radiant-development-eslint-plugin-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293c42ba0700755d809e0cffb5dd4eee0f25f2209932a17eabac567d484bb08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c764c8e1197089b89a69cbb65b46608e4f93bbeb4b959adc6fa58e7f730d0bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sagitta-relay-soap-development (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af375c1cc7e3d5daa24087f91e3a575c2cc62fd208b8c08caabf86453888112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spinner-development-cassini-umbriel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1980e9d652b81daeb875482c3bb1b2e296302bf80c17586a0b77dd834e11825d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in taurus-development-sirius-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be8b5020ffe59b7b9afc50b4ca06dc749d7ade12a8b455458bca24118978902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in thuban-development-transform-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970fc2cf7485e3a83f92015f3ef345dc16d84cdf3b6f96adcc69731705a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113434
Malicious code in framework-dactyl-exec-development npm...
EUVD-2025-113053
Malicious code in grunt-development-postcss-loader-hydra npm...
EUVD-2025-114492
Malicious code in development-cressida-sequelize-odin npm...