246 matches found
MAL-2025-141365 Malicious code in cygnus-draco-local-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8794f6d1882edfc2e26a48be8a5192def801a638744e65a731076bd27bcb8882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142410 Malicious code in farout-draco-supervisor-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4858586155e7e63f2df1e9db1181fe0476633fc8b100b90271961b692e2d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143872 Malicious code in jasmine-vega-mensa-draco (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bffbf8007d94049e42f423a5ce3b85867bf4f4ef2b815980f800fd66b40defed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143587 Malicious code in ini-draco-frontend-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9e64174e135c44aee880ca64de4b7d5765cb2dd9c6917bf4f952af0c5820e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147867 Malicious code in sequelize-express-draco-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 130e2ad2be72b0c33bc8a00e331e47b3d7dc6ac9f9be3eb65feb42045e0ddd97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148049 Malicious code in socketio-draco-blitz-pavo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180c7a73b5e53a5f51dde7e339af90597e7d2ba561bb2a7f5d61e4aa5b6accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141795 Malicious code in draco-quark-dione-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c70caf0a065f874b094b56baaf0fe4c06c6faf90160ec6d14f3e09e716d4c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144559 Malicious code in loopback-neptune-draco-concurrently (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bf80300eab0764f6d6d3b01b0dce677accede3ce2225fb1ebda3b3224b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144195 Malicious code in koa-kaus-sirius-draco (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5da38434c856097646612b2314c16d72307a75149247333f78b7090326adf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147669 Malicious code in sass-loader-gravity-draco-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0d8a65fc724223d4447a7e5edeb4e86f4caf1d3c491101f9560c8b5752539d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146923 Malicious code in quark-csv-draco-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9080c335f4716783b757edb5e4194b3a55d2cc2f22771bd3c9e86bb62589188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141800 Malicious code in draco-webdriver-mocha-writable-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf08bd702ccdecb6c73e7bc793acf780d29e42da42024efd78d93c91d3601cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140987 Malicious code in commitlint-hercules-slidev-draco (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991cb04c1194171b78d7f053ebf092f3b9f49e7ed29b12f2f0776aa9e7cc7dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139600 Malicious code in ariel-zenith-farout-draco (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef2ec87771dfd6bbcceb4e5551bab71eb5acb0ee62571d0b97eb9ffd3c9e8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149882 Malicious code in zephyr-charon-draco-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ed338c2debeeda0e1406d49dd402a5cca90b1cca0aa88d2480ec73c64a6d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113180
Malicious code in global-draco-virgo-bellatrix npm...
EUVD-2025-113957
Malicious code in eridanus-nightwatch-draco-convict npm...
EUVD-2025-114308
Malicious code in draco-xerxes-parcel-browserify npm...