236 matches found
EUVD-2025-113645
Malicious code in figures-elektra-server-buffer npm...
EUVD-2025-113680
Malicious code in fetch-adonis-less-loader-figures npm...
EUVD-2025-122412
Malicious code in rollup-plugin-callisto-figures-cosmos npm...
MAL-2025-139937 Malicious code in bellatrix-figures-mongodb-warp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f312e39cb7550f1523d4dd46a9a1d0e0df309952e4138b70ec6964f280b0f8f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145466 Malicious code in nightwatch-figures-postcss-gacrux (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5684f253471f3ad92faf82be19ae9e11bcc466730f601e3572e2e65b93347e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146347 Malicious code in polaris-inquirer-hexo-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff789d9b33a4b8d655fffdf0ed25e9131f4504fd6990c2728d6ae90c17491c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142467 Malicious code in figures-fusion-nextjs-auth0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1463c83e9442351390e432473567d37b69c6d7f58d11c80760ebca55e7323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147510 Malicious code in rollup-plugin-callisto-figures-cosmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e3ad75f95ef1ab6168c2fc7ffe683dfbcf10052f2ad2549c971e1a6e3d55b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121850
Malicious code in solis-graphql-figures-mysql npm...
EUVD-2025-120443
Malicious code in winston-dactyl-figures-antd npm...
EUVD-2025-113649
Malicious code in figures-changelog-less-nightwatch npm...
EUVD-2025-115915
Malicious code in build-quantum-alphard-figures npm...
EUVD-2025-120748
Malicious code in vortex-figures-cache-passport npm...
EUVD-2025-113629
Malicious code in figures-semantic-ui-cypress-prettier-plugin-markdown npm...
EUVD-2025-111770
Malicious code in less-protractor-nebula-figures npm...
Malicious code in bootstrap-rollup-figures-auriga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc950508599104478cefa863ecb90a39d15f9b7095bafe4d9c802576eb00031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115007
Malicious code in cordelia-meteor-figures-ursa npm...
EUVD-2025-114700
Malicious code in cypress-triton-figures-sails npm...
Malicious code in terser-atlas-figures-readable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5adb748096ba778ee5999d50c614c52e7e276480ebb02aa4b345857a837b99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...