256 matches found
Malicious code in geckodriver-magellan-csv-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcb5295e48d36097f3e9d17b0d1580795374421d507e8f84f0bc5acb818b7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124387
Malicious code in node-sass-duplex-tailwindcss-dione npm...
EUVD-2025-113526
Malicious code in fork-duplex-request-triton npm...
EUVD-2025-114293
Malicious code in duplex-octans-proxima-aether npm...
EUVD-2025-114297
Malicious code in duplex-jekyll-janus-postcss-loader npm...
EUVD-2025-122191
Malicious code in scripts-fork-duplex-meteor npm...
Malicious code in dotenv-umbra-duplex-proxima (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7856ae4344190b8cebd05e3bc90206bc14a97511ec4db990ba37d2fe943a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140981 Malicious code in commitlint-event-hapi-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c7e4542e0c1b82a096fb6fede5659820f6472f2fa073cce4034c27f936ac04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141810 Malicious code in duplex-gridsome-antares-express (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ebe8ecc207c1773caf691799f0028ead9f4ce74df00b2bed7ca7bb70dd6e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139825 Malicious code in axios-despina-karma-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8151d5ca59d464e012a81354c3926da139a00a0f8ecf51fe736ffc94d0ebf35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141822 Malicious code in duplex-winston-loop-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a43e2d71c5eae6cd6f7c189f43194e31c47478b8fe2987a3495d58736c1caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149369 Malicious code in webdriverio-fornax-duplex-command (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6c6c69309a6e97ba9068bd9dc84fc3a380e219ae32e32a0cd777771a2bc12a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112294
Malicious code in janus-meissa-duplex-airbnb npm...
EUVD-2025-114296
Malicious code in duplex-jsonp-zenobia-gemini npm...
EUVD-2025-116371
Malicious code in auth-tethys-duplex-selenium npm...
EUVD-2025-112525
Malicious code in ini-duplex-mini-css-extract-plugin-stream npm...
Malicious code in config-proxima-duplex-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0d5e9cb5983b4c6c0b159ad8e6bd1605cfbb77d5568ccef57bc450516295bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in janus-meissa-duplex-airbnb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e7a4039a5d6413d95e4eae7fb97136fe2aea00c3a1fe6fededc4daff50e582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...