5411 matches found
Malicious code in nashira-fetch-cressida-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f86b96208f69b0e6e8c4f0832ea94f5eb903f45afd4f8c34dccb3a6a079114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113653
Malicious code in fetch-start-carpo-pino npm...
MAL-2025-144132 Malicious code in kastra-scorpius-mocha-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7d64236b575351a9446cd6e18afbbbce19a2a32b2eb67ae0e1e1799e035f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142050 Malicious code in enif-gatsby-fetch-lacerta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de2f9b8d363ef3c5fd440250303d6b6fd6a231b41e7b92f2ab5ae9881eaa924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149601 Malicious code in xanadu-miranda-fetch-aurora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef337b74baee56faf0b2022c88234dbf3f417113cf143aa873275ff626573d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121620
Malicious code in stop-thuban-fetch-electron-builder npm...
MAL-2025-142435 Malicious code in fetch-bootes-concurrently-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73770f8dd611198563c5d0eae11af04fd9b01fbc2d8ab53e3b77989f6c6ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140484 Malicious code in castor-fetch-webdriver-manager-mini-css-extract-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51232fa12f2d0aa1acb5f8f227042e036d7eab4c9faf1918109f2c1b887da57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149811 Malicious code in yildun-configstore-fetch-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142461 Malicious code in fetch-virgo-pegasus-phoenix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd32cdf50e098d0e2c2077c240e4daeb39d7defafc0a8c6f4ddebe06fe32de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144876 Malicious code in metalsmith-elektra-fetch-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad4825d26657e1d808e320ba35d6115608876599dc6bf3bba69bae9ba3c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112262
Malicious code in jasmine-fetch-standard-terser-webpack-plugin npm...
EUVD-2025-113666
Malicious code in fetch-hexo-commitlint-config-angular-metalsmith npm...
EUVD-2025-120640
Malicious code in wasat-fetch-event-airbnb npm...
EUVD-2025-113663
Malicious code in fetch-iota-nightwatch-apollo npm...
EUVD-2025-113659
Malicious code in fetch-polaris-loopback-registry npm...
EUVD-2025-113652
Malicious code in fetch-supervisor-phoenix-octans npm...
Malicious code in development-heka-fetch-deimos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc34f1ad0167ae7f5840b129cbff77369019cb49cf1497dfc4cd4c540ecfb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...