672 matches found
Malicious code in xenon-ursa-semantic-ui-firebase (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d87bbc1741065a631473700c3231b6c156699ec07fc6eb8220040d60406afa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113606
Malicious code in firebase-mini-css-extract-plugin-buffer-kinetic npm...
EUVD-2025-122795
Malicious code in registry-firebase-less-loader-subscription npm...
EUVD-2025-116404
Malicious code in aurora-firebase-magellan-colors npm...
Malicious code in halley-grunt-firebase-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142509 Malicious code in firebase-prompts-ophiuchus-spectron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd762064fe507b2ea3c8881ea3d2ed43a20683cebadab4ebd9480060fda0a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120795
Malicious code in version-firebase-yildun-terser-webpack-plugin npm...
EUVD-2025-124766
Malicious code in mongoose-firebase-local-uglify-js npm...
EUVD-2025-113409
Malicious code in frontend-firebase-websockets-ursa npm...
MAL-2025-146079 Malicious code in perseus-cosmiconfig-firebase-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e221b7d2beb77b6059c0e71a9fb1f02ee2fdfa97680094407cb6f1af94797df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148945 Malicious code in umbriel-orbit-firebase-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63d918694d1ec06ca3636e0c9f9bd1adacaa73c740b5a0878601dfcade48b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149199 Malicious code in vuepress-rest-firebase-despina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polaris-transform-firebase-quasar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91201b5cfb0d545ae12aa908cc7d5b24f7c6833ace2ac82fb6c44e9dce3b5bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141657 Malicious code in docusaurus-cosmiconfig-fomalhaut-firebase (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48320ffdb95d1b543c27168dccd5a5eb028beb17f1215e1de83ec2140b407d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113737
Malicious code in express-electron-builder-eslint-plugin-firebase npm...
MAL-2025-149595 Malicious code in xanadu-firebase-hydra-avior (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2968e2c1db958009855484fb18365bced939dabc426a4aebb39c634a70f67dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121508
Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin npm...
MAL-2025-142515 Malicious code in firebase-server-miranda-jupiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb4a7fb178cd7eadc112d909aa87f187fb04dd8148d9afd9a0ff5227a5d61e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...