245 matches found
EUVD-2025-178918
Malicious code in figures-duplex-magnetar-await npm...
MAL-2025-188294 Malicious code in nightwatch-sedna-cosmiconfig-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21f21d6be4c66b2ee15a78032e53be0a3ad159b0664bd39e8ecc869b9267f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hydra-duplex-npm-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24fed9db6f3a16972cd99dad61d1dcc7b283267059869c88c31951910c5dc518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186649 Malicious code in duplex-request-astrometry-titan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2651fe16dc29246ea136b5abe4b863a53fc8361641f4db128a6e69e0911519d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189872 Malicious code in terser-webpack-plugin-centaurus-version-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3c5c34ad44ac941803db664d6a785fac2fd342500558c1c26e98ba07c786178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186389 Malicious code in crust-proxima-typeorm-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c6c8e10cd58c712a41d9039c79673888315a901ffedcdff6a4a384ab7aa87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188075 Malicious code in miranda-koa-fetch-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0542faa9fd01fa72c958cf46a1d5a08f0ba4db727709a088052187230321c063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177588
Malicious code in nightwatch-sedna-cosmiconfig-duplex npm...
EUVD-2025-177807
Malicious code in miranda-koa-fetch-duplex npm...
EUVD-2025-179231
Malicious code in duplex-version-polaris-cosmos npm...
EUVD-2025-175650
Malicious code in warp-ora-duplex-jekyll npm...
Malicious code in crust-proxima-typeorm-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c6c8e10cd58c712a41d9039c79673888315a901ffedcdff6a4a384ab7aa87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178530
Malicious code in hexo-duplex-xenos-bootstrap npm...
Malicious code in warp-ora-duplex-jekyll (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66ff385a22dffe023d98891710432d0c59ead5f5af2c822fff70f98049abf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180297
Malicious code in astrobiology-loopback-hermes-duplex npm...
Malicious code in duplex-eslint-plugin-apex-taphonomy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2235332a5fb41e922702c24cc78cadd2f0764b74cdef1022c5fb1baebeda86a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179444
Malicious code in cybernetics-duplex-wolf-json npm...
MAL-2025-190226 Malicious code in warp-ora-duplex-jekyll (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66ff385a22dffe023d98891710432d0c59ead5f5af2c822fff70f98049abf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...