245 matches found
MAL-2025-141822 Malicious code in duplex-winston-loop-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a43e2d71c5eae6cd6f7c189f43194e31c47478b8fe2987a3495d58736c1caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141810 Malicious code in duplex-gridsome-antares-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ebe8ecc207c1773caf691799f0028ead9f4ce74df00b2bed7ca7bb70dd6e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116371
Malicious code in auth-tethys-duplex-selenium npm...
EUVD-2025-114287
Malicious code in duplex-winston-loop-hyperion npm...
EUVD-2025-124827
Malicious code in mocha-reveal-md-nextjs-duplex npm...
EUVD-2025-122851
Malicious code in react-bootstrap-polaris-prompts-duplex npm...
EUVD-2025-120494
Malicious code in weywot-duplex-meissa-janus npm...
EUVD-2025-120734
Malicious code in vuepress-aquarius-fornax-duplex npm...
EUVD-2025-122021
Malicious code in server-nova-iota-duplex npm...
EUVD-2025-113240
Malicious code in geckodriver-magellan-csv-duplex npm...
EUVD-2025-120657
Malicious code in warp-miranda-dotenv-safe-duplex npm...
EUVD-2025-114288
Malicious code in duplex-vuepress-ini-nightwatch npm...
EUVD-2025-120965
Malicious code in uninstall-perseus-duplex-uninstall npm...
Malicious code in duplex-vuepress-ini-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a17ac0306d65a92bb6331bba707a8b9b14665480db55f8345b768c957e75f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116459
Malicious code in atlas-duplex-astro-spectron npm...
Malicious code in janus-meissa-duplex-airbnb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e7a4039a5d6413d95e4eae7fb97136fe2aea00c3a1fe6fededc4daff50e582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in capella-duplex-upgrade-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea0537e1d4f6441625d140f225246350b2f419c999df9095d0aa0b6fdd48e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nconf-alphard-electron-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56efbf37a7c3c9f8f377dd8543c4fb306af60ce943f5db4d631ad8a3ddc5a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...