6825 matches found
EUVD-2025-113668
Malicious code in fetch-event-cosmiconfig-chalk npm...
MAL-2025-149811 Malicious code in yildun-configstore-fetch-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111239
Malicious code in metalsmith-elektra-fetch-event npm...
Malicious code in metalsmith-elektra-fetch-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad4825d26657e1d808e320ba35d6115608876599dc6bf3bba69bae9ba3c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113734
Malicious code in express-fetch-build-auth0 npm...
EUVD-2025-116826
Malicious code in aldebaran-fetch-node-sass-koa npm...
Malicious code in fetch-husky-slides-sedna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb8880199d75a5db2d02dd91a1ba2e0c5eca450d26a8d696a8074ac48e4e0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112859
Malicious code in helmet-fetch-forever-registry npm...
EUVD-2025-121872
Malicious code in socketio-fetch-jekyll-bellatrix npm...
MAL-2025-144586 Malicious code in luna-ultra-fetch-odin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00ed8cbc51d9cd205cf472188ea84f2ab444b56ddf9af825ca395be404fd4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in electron-builder-nconf-warp-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144132 Malicious code in kastra-scorpius-mocha-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7d64236b575351a9446cd6e18afbbbce19a2a32b2eb67ae0e1e1799e035f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142445 Malicious code in fetch-hexo-commitlint-config-angular-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1275904ccd7fcedcc0f0e16254ee142d90c79cc0ba947d02fe8bfe251f8ffa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142435 Malicious code in fetch-bootes-concurrently-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73770f8dd611198563c5d0eae11af04fd9b01fbc2d8ab53e3b77989f6c6ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142050 Malicious code in enif-gatsby-fetch-lacerta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de2f9b8d363ef3c5fd440250303d6b6fd6a231b41e7b92f2ab5ae9881eaa924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nashira-fetch-cressida-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f86b96208f69b0e6e8c4f0832ea94f5eb903f45afd4f8c34dccb3a6a079114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fetch-virgo-nashira-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5313f53f3f660bb8e9d871ae08b0f9251fc9200b75390bae8273643364e9b20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113680
Malicious code in fetch-adonis-less-loader-figures npm...