13230 matches found
Malicious code in global-phoebe-hermes-mira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b9cf8f68fe78b8401aafb88d4aaf8ce51f84264f6b6d3ad78a28340871c9b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113187
Malicious code in global-babel-sagitta-miranda npm...
EUVD-2025-113166
Malicious code in global-phoebe-hermes-mira npm...
EUVD-2025-115798
Malicious code in callback-puppeteer-janus-global npm...
EUVD-2025-121110
Malicious code in triton-global-unuk-inquirer npm...
EUVD-2025-113158
Malicious code in global-zenith-child-process-await npm...
Malicious code in global-dione-eleventy-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fa86d4174d75787032ca9ad72fe97137a727c350cf3755ade0e4f4408686ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lint-staged-commitlint-global-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304b77175b845c66db53476f7ce9d03f92d733e55c29c84ccab5770fe6f45bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114534
Malicious code in dependencies-mongoose-markdownlint-global npm...
EUVD-2025-112131
Malicious code in json-quito-iota-global npm...
EUVD-2025-115385
Malicious code in charon-inquirer-bellatrix-global npm...
EUVD-2025-112054
Malicious code in jupiter-leda-sadr-global npm...
EUVD-2025-123055
Malicious code in puppeteer-version-quasar-global npm...
MAL-2025-142951 Malicious code in global-toml-vuepress-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a8cdb722e96e67d2348f504d26379d9b7b8862df3266e39cbf1756954a7aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113170
Malicious code in global-loglevel-lacerta-figures npm...
Malicious code in galaxy-vuetify-kaus-global (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2033820f97f916e773d13ef8133bfd0610ebcff696815f0c5eb8325a51bf919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in husky-global-lint-staged-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f4d5f79c4d1a26757a542e6f25f54750d63a47fed852f3fc6decaf700d2b8cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111204
Malicious code in meteor-global-xo-sequelize npm...