38153 matches found
EUVD-2025-120580
Malicious code in webdriver-mocha-grus-zenobia-sass-loader npm...
Malicious code in cors-framework-promise-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b47433d07003e13f2c30807743c8b152d09fb9ce52429e162877aedcc69d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112117
Malicious code in jsonp-framework-izar-update npm...
MAL-2025-144078 Malicious code in jwt-leda-framework-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb4f8cb8d4f557c3034d71e7ecaf0ff765c06e1a8805438ce959a7d22ca3637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140747 Malicious code in child-process-framework-metalsmith-celeste (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849be0aae93e5cfbd3e6a735ee71094677ea146394d513afeaba71ce013d555d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141519 Malicious code in delphinus-io-aldebaran-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d821ef98f08a1c0be384e1163096d7db814e10ae4f42e0e576ae0d3a45c7e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144549 Malicious code in loopback-framework-loopback-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143605 Malicious code in ini-rigel-framework-helmet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e6a460eaceaef16c9333b123fd0edda2d6049e201f24ea333cd2252d55a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143591 Malicious code in ini-forever-foundation-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276bf94003b7622e515f3e0a9f9a371f2d64a3f3045c39359a4cb9e0343543a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145751 Malicious code in oberon-passport-toml-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f7557dd8b6de4242569f5a8fffd43e5fc5d782c730a95e3d071fe130de8102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143518 Malicious code in ignite-leda-framework-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c8e962cc443d3c769a93da076a5922db0b0a446f38de08dadcd7bf23a644230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141711 Malicious code in dotenv-parse-variables-callisto-oauth-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb5d62c0d246d9201d77e51324b2e594d0edc2bfeab4f70f8c8bbe9629df860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122776
Malicious code in regulus-framework-chai-andromeda npm...
EUVD-2025-114097
Malicious code in eleventy-spinner-gemini-framework npm...
EUVD-2025-115750
Malicious code in canopus-centauri-yildun-framework npm...
EUVD-2025-115334
Malicious code in chromedriver-framework-private-less npm...
Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113435
Malicious code in framework-css-loader-enceladus-chai npm...