256 matches found
MAL-2025-149367 Malicious code in webdriverio-electron-eris-version (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15da77ab2059298b817155b92ac964758be6ef5076d9b7cf35ca406fb0edbc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144144 Malicious code in kaus-gatsby-mysql-eris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5665518e65d519d977b2cc707a78c6be8ef6a5efb223966857feb2b01b5b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142179 Malicious code in eris-postcss-meissa-orbit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27bcabfaaa9e19e794765c57eb2a14c626c0f10f9a9c0753116c47fdae89bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rocket-tethys-restart-eris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fb6d06018e5315d30aaae3b2d3c6c06487823b3b397fad9d653b0f07b07d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in corvus-tool-eris-uninstall (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c70e245e0236f09ab23fa8be3ab93de3e17af4507ca9c2ea53298eb3bf1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113431
Malicious code in framework-eris-nuxtjs-grus npm...
EUVD-2025-124844
Malicious code in mocha-eris-spectron-forever npm...
EUVD-2025-113946
Malicious code in eris-carpo-changelog-winston npm...
EUVD-2025-113938
Malicious code in eris-eslint-plugin-zenobia-lint-staged npm...
EUVD-2025-123391
Malicious code in private-eris-express-parcel npm...
EUVD-2025-113927
Malicious code in eris-slides-less-wasat npm...
EUVD-2025-121875
Malicious code in socketio-eris-delphinus-sass-loader npm...
Malicious code in eris-duplex-firebase-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b388b7f76911b853fb6047f3e4f4e11e927e0aa88842e90a0790a39b30f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123888
Malicious code in pegasus-heka-eris-magellan npm...
Malicious code in thuban-eris-sadr-lacerta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afbedbf2b4ed44d816ed2a9def1a28eea2d4b80782ec0d6f39460e743a2a8de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121509
Malicious code in sync-commitlint-materialize-eris npm...
Malicious code in rehype-eris-algol-ignite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa52e77988c744b88131fd41aa547759e2c6ce9957fddcc2632329184357735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eris-miranda-csv-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08de3a8d81298ce8a508487d4353acf11b5e3fed26f67cac0a62919a1ba1851b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ophiuchus-eris-wasat-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e21e88e18b9084e7aab61b19c9e629c5c6c8c1340347d39df9bdae2a0de73c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...