378 matches found
Malicious code in transform-norma-flare-carpo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9685efa450029c0745cb676603c2b786a4e491760c5f9542c5107d9925439b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114370
Malicious code in dotenv-parse-variables-yonder-flare-indus npm...
Malicious code in restart-flare-axios-unuk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddc24605e17194bd89712ce51c79a66995a448dc7f7d583a8ffe92cb6eb13392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123330
Malicious code in procyon-flare-webpack-bootes npm...
Malicious code in pino-pretty-rate-limiter-xerxes-flare (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0abf532044d3c7fd705ec111e6e3edbb278aef7902b90066d9d00267bcb31a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gravity-flare-async-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afaee9c4dea8100f153b287b329c31392a468c2d17a4394f167daf28eee72e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113586
Malicious code in flare-gridsome-sirius-ini npm...
EUVD-2025-112656
Malicious code in hydra-semantic-release-flare-mutation npm...
EUVD-2025-115421
Malicious code in changelog-stop-spectron-webdriver-flare npm...
EUVD-2025-111708
Malicious code in link-flare-loglevel-command npm...
EUVD-2025-112834
Malicious code in hercules-convict-indus-flare npm...
Malicious code in callback-venus-flare-charon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc23af055cefad148c2cbf98683998b9525982e272f70c25fcb1f3cf400a4b44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121408
Malicious code in terser-flare-css-loader-pipe npm...
EUVD-2025-113584
Malicious code in flare-halley-meissa-jupiter npm...
EUVD-2025-114669
Malicious code in dactyl-flare-galaxy-galaxy npm...
EUVD-2025-115198
Malicious code in command-magellan-izar-flare npm...
Malicious code in flare-pm2-capella-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffdfdbbb62103e9a6ef152943e0d49988b71a782d7479fba5ae5c2294b2f0f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120777
Malicious code in virgo-child-process-flare-vulcan npm...