1295 matches found
MAL-2025-143021 Malicious code in gravity-chariklo-library-rimraf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760633396d9626e1446ca9c941b2341fd8bf903b955e6bd238487ca4d258e29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143016 Malicious code in gravity-arcturus-auriga-xanadu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e16402638aeed0613b6f982c6a3151ec789269a707550d1762c4eb988453a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111920
Malicious code in koa-gravity-magellan-helmet npm...
Malicious code in koa-gravity-magellan-helmet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd05b0517d4ec7568e8246064b2efd94bbb341abb6d37f6c5ae63c2837db6548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113096
Malicious code in gravity-arcturus-auriga-xanadu npm...
EUVD-2025-111476
Malicious code in magellan-gravity-rehype-proxima npm...
EUVD-2025-115332
Malicious code in chromedriver-init-puppeteer-gravity npm...
EUVD-2025-122253
Malicious code in sass-loader-gravity-draco-miranda npm...
EUVD-2025-122760
Malicious code in rehype-auriga-google-gravity npm...
Malicious code in scorpius-puppeteer-gravity-webdriverio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a295c665cd756be249510160bcea8ff37c3445fbe45a423d3186e8403d9625f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123594
Malicious code in polaris-cache-geckodriver-gravity npm...
EUVD-2025-123518
Malicious code in postcss-loader-npm-child-process-gravity npm...
EUVD-2025-112038
Malicious code in jwt-gravity-europa-hexo npm...
EUVD-2025-124695
Malicious code in mutation-gacrux-axios-gravity npm...
EUVD-2025-113089
Malicious code in gravity-dotenv-safe-quark-publish npm...
Malicious code in sedna-postcss-gravity-lacerta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4518a1db3516a32330ad1a98f283c25f4d297b1556347a4e89b67adacb66de53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polaris-cache-geckodriver-gravity (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aabbeb70ac312a861cee080d883f38c47e8b66b9d9798c90eda84e2aad74baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gravity-gridsome-equinox-playwright (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4084b8a79dc6e11f6c86a344031dbaf4ba059ec5ef8d2e89110dcae2b9a3ff5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...