256 matches found
MAL-2025-141804 Malicious code in duplex-browserify-magellan-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7466a01a5be6f74833c766c462326c87f8675e1a5883a6027ac90454c2d797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149169 Malicious code in virgo-scorpius-duplex-weywot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ba2c6e8699676484b8d7953e6c0d7b38439794a27dc8a4a4f1f2ca065d099a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149195 Malicious code in vuepress-aquarius-fornax-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a3ba18460fa574edc9d017beb864f9c2393908814fc53a05638effd130fb01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142094 Malicious code in epimetheus-fomalhaut-got-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088d7d122940c41b02e3cdeb1474049e7ce9455ae8c61523e12a292449e04400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141820 Malicious code in duplex-sequelize-blitz-odin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2346b0bf4861676926585e3f847208430f9349ab412d1fe2e14790ddaa9c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141036 Malicious code in config-proxima-duplex-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0d5e9cb5983b4c6c0b159ad8e6bd1605cfbb77d5568ccef57bc450516295bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147071 Malicious code in react-bootstrap-polaris-prompts-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ab5c4a923aa2e466ecbc96e0eac3c8a5009b0e4895c85f60cfa56187d7f5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145340 Malicious code in nebula-duplex-nightwatch-materialize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412c4f262852e7f97b4bcd32fb6dc1aefd960c6630d40137b33a576d3e4010a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123094
Malicious code in pulsar-duplex-chakra-ui-equinox npm...
EUVD-2025-114296
Malicious code in duplex-jsonp-zenobia-gemini npm...
EUVD-2025-116371
Malicious code in auth-tethys-duplex-selenium npm...
EUVD-2025-112525
Malicious code in ini-duplex-mini-css-extract-plugin-stream npm...
Malicious code in atlas-duplex-astro-spectron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba777d8a797ecbd56772ba0ed6f122615394e758366f76afb97e132efb482194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in capella-duplex-upgrade-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea0537e1d4f6441625d140f225246350b2f419c999df9095d0aa0b6fdd48e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in config-proxima-duplex-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0d5e9cb5983b4c6c0b159ad8e6bd1605cfbb77d5568ccef57bc450516295bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in duplex-babel-npm-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe1d62d8945bed9474281bed75b3cef1cdb2f36be4c2dab9212839a18f37a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in duplex-browserify-magellan-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7466a01a5be6f74833c766c462326c87f8675e1a5883a6027ac90454c2d797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hydra-duplex-ursa-less (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6937793f75424fe2d5f90958bdbbc1a856bd441f4ed9d7ca875e9d24f80bbf65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in janus-meissa-duplex-airbnb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e7a4039a5d6413d95e4eae7fb97136fe2aea00c3a1fe6fededc4daff50e582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...