1295 matches found
MAL-2025-144409 Malicious code in link-gravity-css-loader-arcturus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143027 Malicious code in gravity-jabbah-magellan-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5229ad0bb0abdb1698460191f585f244fb025a2accd69fcc65785d3005ed69d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143023 Malicious code in gravity-dotenv-safe-quark-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b46743d185d3cb8c0ab240e5bd2abf54d2e9eed58e86663014e8e9ec32d58bf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gravity-react-bootstrap-commitlint-dynamo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb22033e71a11b9b4e5ea920eae840ead86fee21e944aa895a89667612aee75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124742
Malicious code in morgan-gravity-lint-altair npm...
MAL-2025-143018 Malicious code in gravity-bellatrix-farout-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840af6420f87daaf0dc5682a4ed0da2e4e51c0d3acc1380a1e56dd4d9ca2b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146144 Malicious code in phoebe-centaurus-pipe-gravity (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3a8c18f7ac238f1acacd09802476e050fd2c967e0bf88d0d81b6c9e94639a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139380 Malicious code in andromeda-octans-gravity-electron-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b903c2efd3a322297db69de5c623515a807cd44a60b84bf8a58bc1eb00a0b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115855
Malicious code in bunyan-nestjs-gravity-atlas npm...
EUVD-2025-115200
Malicious code in command-io-gravity-orbit npm...
Malicious code in gravity-flare-async-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afaee9c4dea8100f153b287b329c31392a468c2d17a4394f167daf28eee72e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115937
Malicious code in buffer-pavo-europa-gravity npm...
Malicious code in deimos-gravity-cache-elektra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622702e688f2fb8e40276dc4b844a58c5ad13b3b4ca30106511cad457fa7130d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in indus-vuepress-gravity-electron-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842edb560ff36acfb2b0d37655c806a3ae96deac3576f8748acf76b28820150f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114615
Malicious code in deimos-gravity-cache-elektra npm...
Malicious code in vuepress-pegasus-gravity-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f30b9d98da16f6d11401b6e3f4e7a2a556ca0adb7e3e59cb98234cbe0a3409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113087
Malicious code in gravity-got-xenos-css-minimizer-webpack-plugin npm...
EUVD-2025-123020
Malicious code in quantum-ganymede-gravity-winston npm...