13237 matches found
EUVD-2025-113184
Malicious code in global-cygnus-carpo-dagda npm...
EUVD-2025-113369
Malicious code in fusion-perseus-global-fornax npm...
EUVD-2025-111106
Malicious code in mira-global-docusaurus-webdriver-manager npm...
MAL-2025-139659 Malicious code in atlas-standard-global-jekyll (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e6f40857900117e23b70df586911da4b9a5d7ea29996d0dc9e08ae33ccf5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113164
Malicious code in global-pyxis-janus-epimetheus npm...
MAL-2025-146640 Malicious code in promise-global-wolf-arcturus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c542283852b34f2b6b3328de1a5885fd139dc09ab31028ccd56879b79590ad54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142940 Malicious code in global-lacerta-sagitta-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aab090a06890abad34f96c9d0c014ede763e63fe2ccc634f3da5a8b7fa2a1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144467 Malicious code in lint-staged-sync-global-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9f543858dd41d5c201e3ced1a84ac7806a02565e07ef4cca4bd240aa85d04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146867 Malicious code in puppeteer-version-quasar-global (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de9ef915d03674eeb939c682418a9c6f4d6515f249cd66cf91aca1086e2a6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120531
Malicious code in webpack-global-concurrently-venus npm...
EUVD-2025-111717
Malicious code in link-async-global-reveal-md npm...
EUVD-2025-113171
Malicious code in global-leda-xenon-supervisor npm...
EUVD-2025-113161
Malicious code in global-toml-vuepress-middleware npm...
MAL-2025-148937 Malicious code in umbriel-colors-vulcan-global (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b202a8c96f7d76eb0935699e3d6b8e34183dbda7d3dc4dcceb6096407e578437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149825 Malicious code in yildun-vuetify-fork-global (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368ed533673888e54c66221181fd64ec8dc89a8f4b0172d01172e1acc14a28b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in global-draco-virgo-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8da2ab4b62c8dd339ff475a68b7c495dc169c8043db895cf6966aa61fdbd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in atlas-global-mysql-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9cd21d21e6aec5f232242cece02a587e6446f016f77c2bd9e2f58957bab83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116458
Malicious code in atlas-global-mysql-pegasus npm...
MAL-2025-145009 Malicious code in mira-global-docusaurus-webdriver-manager (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bfcb6442d80637c44c046ad152f6906b1d7c2c9c003ffe0801fb69f3354a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...