607 matches found
MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148945 Malicious code in umbriel-orbit-firebase-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63d918694d1ec06ca3636e0c9f9bd1adacaa73c740b5a0878601dfcade48b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113616
Malicious code in firebase-eleventy-protractor-vortex npm...
EUVD-2025-121575
Malicious code in subscription-betelgeuse-firebase-nconf npm...
Malicious code in loopback-firebase-postgres-luna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2789696425e4ec276c93faea29470a11265e41a4117bcdbc14f88a208240a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111509
Malicious code in lyra-elara-mongodb-firebase npm...
EUVD-2025-123386
Malicious code in private-norma-firebase-pipe npm...
Malicious code in jekyll-jasmine-firebase-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cdbb37bda77e42c09b559a883ef4a07bdfb334392fffb8017a7f5a85f82803a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113612
Malicious code in firebase-google-castor-standard npm...
Malicious code in firebase-equinox-subscription-configstore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb7bcb8fb5b305c8955a209837823b518246f954d7f8092b05bf6df8cb27e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in firebase-leda-octans-postgres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046135d9533214ad4d91e18be5daabadf580eab15d8555b1898656eb50254295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cosmiconfig-firebase-warp-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112805
Malicious code in hermes-child-process-event-firebase npm...
EUVD-2025-123024
Malicious code in quantum-commitlint-config-angular-event-firebase npm...
Malicious code in vuepress-rest-firebase-despina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113602
Malicious code in firebase-prompts-ophiuchus-spectron npm...
EUVD-2025-113622
Malicious code in firebase-charon-node-config-delphinus npm...
EUVD-2025-115104
Malicious code in concurrently-firebase-remark-postcss-loader npm...