39384 matches found
MAL-2025-143314 Malicious code in hermes-development-browserify-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603d2d8cb661d4bfb2a2f0cae3ab47d384a2ec9b7bd2980e68a0ee846b0d175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142630 Malicious code in fornax-link-framework-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad198d91229350f652e4ae102f70d8e7ce49ce27bdf04e26787e9a03c241f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145947 Malicious code in parcel-apollo-framework-venus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea42becba6a089bebabca0dc3b4529b470bb588c4ad13b4ebd10402cbc0a618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sass-loader-jovian-axios-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49329d1c8108c8908b1f6cf4dbd3fd17779a8121cd73d24cc2d66e6aa25aa7ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in janus-rocket-helmet-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf25cb6683a7b566d5fac63c10dcddb44280307cb73219f67c7a9d006ff0d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124757
Malicious code in mongoose-nextjs-tailwindcss-xml npm...
MAL-2025-142692 Malicious code in framework-quasar-spawn-commitlint-config-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf3c1ced05681da6b00f91ff5765d1da4c60751cf4ae4ef9f608e00d15fc266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147164 Malicious code in rehype-cordelia-framework-ceres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6b689160e4581ea532cb8229eedfe2bc5bdfad888df29d6e500d0aaa36077a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fornax-link-framework-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad198d91229350f652e4ae102f70d8e7ce49ce27bdf04e26787e9a03c241f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140773 Malicious code in chromedriver-framework-private-less (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d375d7091322fdaae73b2a3edbe7c96c32587195cf1297018f3f6329e3853b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in protractor-regulus-xo-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f0ecd50ac91c36ba79eb6075ee122df6de1bf11f6408f38cf8f4a85d017fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142685 Malicious code in framework-magellan-mocha-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134d8b8ad0a608d770da2b282ea99ddaa6fcb5459a7eea6743382b9852548bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142687 Malicious code in framework-mysql-regulus-element-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4713f90c44e813de6e1ae468be5e23ecf7228066c5cb246888f727377943d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gemini-rest-framework-quasar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08837658c072ebfa61c447e87f20d110d1781a9926d49b77bebdbacffc5a0cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114590
Malicious code in delphinus-io-aldebaran-framework npm...
EUVD-2025-113427
Malicious code in framework-magellan-mocha-lynx npm...
EUVD-2025-120475
Malicious code in wezen-framework-dotenv-safe-testcafe npm...
EUVD-2025-114254
Malicious code in eclipse-nightmare-framework-dotenv-parse-variables npm...
Malicious code in loopback-framework-loopback-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...