236 matches found
Malicious code in jovian-pegasus-fork-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69d19a2d6e02cc5e034b684051a6916cd908bb4104d27c1e3137f97d1def607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142468 Malicious code in figures-halley-cygnus-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bfdd47cd57e9ec30a9e0daefae6dced0d48b8bcdec9c70ebcd41b4bf6f3247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142216 Malicious code in eslint-element-ui-buffer-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a508dc44f6b649dc11aea2adfd3e0733d721a23e86034b25f378d3064b31a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149567 Malicious code in wolf-xo-meteor-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412da3d5b464f3ed5815a795d7eb08b586d9b4fc392cd09d79ea6cd8f12ec3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146532 Malicious code in private-figures-package-commitlint-config-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d36fd20fd35342e09fa3fb785bb03a67fb101cb03c22763f8c568c575bd8d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141887 Malicious code in elara-prettier-plugin-markdown-figures-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4287722d3e59d155f6cc47ce25f67e37f2fcc76a23ef7370d24188884c827b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148509 Malicious code in terser-atlas-figures-readable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5adb748096ba778ee5999d50c614c52e7e276480ebb02aa4b345857a837b99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140850 Malicious code in colors-figures-hermes-babel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb0d461a39e2a3c5b55bbcc5d75fcf61a6d0ccbbbd2705f05c448b7037bfc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140990 Malicious code in commitlint-jovian-exec-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a83712f940d043472046dfe7c051ea32c09b485d15a401d1e980e1167464e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nightwatch-figures-postcss-gacrux (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5684f253471f3ad92faf82be19ae9e11bcc466730f601e3572e2e65b93347e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122158
Malicious code in sedna-graphql-figures-nodejs npm...
EUVD-2025-116165
Malicious code in bellatrix-figures-mongodb-warp npm...
EUVD-2025-113630
Malicious code in figures-scorpius-gravity-markdown-pdf npm...
EUVD-2025-113642
Malicious code in figures-hermes-epimetheus-lynx npm...
EUVD-2025-113641
Malicious code in figures-hyperion-selenium-kastra npm...
EUVD-2025-113640
Malicious code in figures-ignite-typeorm-grunt npm...
EUVD-2025-116094
Malicious code in betelgeuse-spica-figures-hapi npm...
EUVD-2025-113254
Malicious code in geckodriver-centaurus-nextjs-figures npm...
Malicious code in venus-figures-configstore-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0543c785df22d8f67917ca6aa28df150dc9ee6ece52da178cf311fedb4a0b36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...