6873 matches found
EUVD-2025-120330
Malicious code in xanadu-miranda-fetch-aurora npm...
EUVD-2025-113653
Malicious code in fetch-start-carpo-pino npm...
EUVD-2025-113668
Malicious code in fetch-event-cosmiconfig-chalk npm...
EUVD-2025-111239
Malicious code in metalsmith-elektra-fetch-event npm...
Malicious code in metalsmith-elektra-fetch-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad4825d26657e1d808e320ba35d6115608876599dc6bf3bba69bae9ba3c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113734
Malicious code in express-fetch-build-auth0 npm...
Malicious code in fetch-husky-slides-sedna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb8880199d75a5db2d02dd91a1ba2e0c5eca450d26a8d696a8074ac48e4e0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112859
Malicious code in helmet-fetch-forever-registry npm...
MAL-2025-142439 Malicious code in fetch-corvus-auth-charon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de090b94808980372619b8096599353dd43a9676150155c1d8046afdbf5a8d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124298
Malicious code in non-blocking-start-sequelize-fetch npm...
MAL-2025-144586 Malicious code in luna-ultra-fetch-odin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00ed8cbc51d9cd205cf472188ea84f2ab444b56ddf9af825ca395be404fd4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in electron-builder-nconf-warp-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142435 Malicious code in fetch-bootes-concurrently-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73770f8dd611198563c5d0eae11af04fd9b01fbc2d8ab53e3b77989f6c6ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nashira-fetch-cressida-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f86b96208f69b0e6e8c4f0832ea94f5eb903f45afd4f8c34dccb3a6a079114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fetch-virgo-nashira-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5313f53f3f660bb8e9d871ae08b0f9251fc9200b75390bae8273643364e9b20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113678
Malicious code in fetch-bellatrix-celeste-jwt npm...
EUVD-2025-111529
Malicious code in luna-ultra-fetch-odin npm...
MAL-2025-144132 Malicious code in kastra-scorpius-mocha-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7d64236b575351a9446cd6e18afbbbce19a2a32b2eb67ae0e1e1799e035f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149601 Malicious code in xanadu-miranda-fetch-aurora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef337b74baee56faf0b2022c88234dbf3f417113cf143aa873275ff626573d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...