245 matches found
EUVD-2025-115127
Malicious code in commitlint-event-hapi-duplex npm...
Malicious code in duplex-babel-npm-jsonp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe1d62d8945bed9474281bed75b3cef1cdb2f36be4c2dab9212839a18f37a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115073
Malicious code in config-proxima-duplex-adonis npm...
MAL-2025-142310 Malicious code in event-duplex-node-config-public (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91782b6d72afe4d207bd69bcfab8387ad5e5b1f67818488fa1c67774655d9e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114303
Malicious code in duplex-cordelia-package-mysql npm...
EUVD-2025-114324
Malicious code in dotenv-umbra-duplex-proxima npm...
EUVD-2025-116637
Malicious code in antd-repository-nightwatch-duplex npm...
MAL-2025-149272 Malicious code in warp-miranda-dotenv-safe-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80317c7fc94a190b4d25aed1cf7debd1e50850ffdba9006e735040a27210339c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141812 Malicious code in duplex-jekyll-janus-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5d9eef64606b70b321ce6c4a064af57dcc5d305c662934213156fc9a822c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141036 Malicious code in config-proxima-duplex-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0d5e9cb5983b4c6c0b159ad8e6bd1605cfbb77d5568ccef57bc450516295bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139825 Malicious code in axios-despina-karma-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8151d5ca59d464e012a81354c3926da139a00a0f8ecf51fe736ffc94d0ebf35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145813 Malicious code in ophiuchus-duplex-koa-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 026985088b076b41d3553a135400fe4e6195e5a076210af526056f647ef5ba1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122021
Malicious code in server-nova-iota-duplex npm...
EUVD-2025-120734
Malicious code in vuepress-aquarius-fornax-duplex npm...
EUVD-2025-113240
Malicious code in geckodriver-magellan-csv-duplex npm...
EUVD-2025-120494
Malicious code in weywot-duplex-meissa-janus npm...
EUVD-2025-120657
Malicious code in warp-miranda-dotenv-safe-duplex npm...
EUVD-2025-124387
Malicious code in node-sass-duplex-tailwindcss-dione npm...