695 matches found
EUVD-2025-116169
Malicious code in bellatrix-cz-conventional-changelog-firebase-version npm...
MAL-2025-142499 Malicious code in firebase-google-castor-standard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c35d855c4037261cc0e67a28f5041d8ad7486426f5f63b1215b4d1954ca699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148945 Malicious code in umbriel-orbit-firebase-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63d918694d1ec06ca3636e0c9f9bd1adacaa73c740b5a0878601dfcade48b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143144 Malicious code in halley-grunt-firebase-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142494 Malicious code in firebase-dotenv-jekyll-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7250fd1d98f38675d88943be502ddde7a74890f2a44a5886ad8996430edd8f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120756
Malicious code in virgo-vega-zephyr-firebase npm...
Malicious code in vuepress-rest-firebase-despina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in firebase-relay-winston-webdriverio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8df2c7171ca9261aad999cabc9cab7d7e3eb476ecbee2445af9054a0299af5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112380
Malicious code in iota-nestjs-firebase-rest npm...
MAL-2025-142517 Malicious code in firebase-tethys-lacerta-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d5ff0f33b8c4e3d791473618cc4821b1a690ac34b74c6f64375aa339435f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142497 Malicious code in firebase-equinox-subscription-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb7bcb8fb5b305c8955a209837823b518246f954d7f8092b05bf6df8cb27e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140962 Malicious code in commitlint-config-angular-firebase-node-config-wezen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f2862c90083d0e858dbc19eddcb13d4246beb63decd5dd5511dc3e4d9f3fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142489 Malicious code in firebase-charon-node-config-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b995051a7142a276f04ec88281667d77e5e1ef909b5dc5770fe7f2d136fe09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142503 Malicious code in firebase-meissa-loopback-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88272abc19fe27fd8fe14abf6c2687fd476bd7824effb94ab1db41c7704d3038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113599
Malicious code in firebase-sagitta-tool-corvus npm...
EUVD-2025-120795
Malicious code in version-firebase-yildun-terser-webpack-plugin npm...
EUVD-2025-111568
Malicious code in loopback-firebase-postgres-luna npm...
EUVD-2025-115382
Malicious code in charon-lint-envconfig-firebase npm...