Lucene search
+L

143 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 8:17 a.m.•5 views

Malicious code in latin-lime-halibut (npm)

Source: amazon-inspector d16ee4302357a02382b989d31c09a7cb0b9a0f3f99c49dc6f79fa1076c3e4d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:59 a.m.•3 views

Malicious code in halibut-notthedevs (npm)

Source: amazon-inspector 947a0e7b4117084bbbe08652184ecfa3c7e1236e539d709fb3ec51f06b2f9d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•2 views

Malicious code in ethnic-orange-halibut (npm)

Source: amazon-inspector fbac2233909c2f45b8bbd494ceabe0eafcf5fa796b8b6e38ce4b75cd9bc9ac20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:42 a.m.•6 views

Malicious code in eldest-blue-halibut (npm)

Source: amazon-inspector d4e3ac34afb6cd8122c3798387b9662689e060aff66fd75fd69b4e4c0daf940b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/02 9:21 p.m.•6 views

Malicious code in awake-ivory-halibut (npm)

Source: amazon-inspector 4710da8ec98213a7ea2a941117f3b08ac01514505a45fa95e0b499d4c3e18762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/31 11:14 p.m.•3 views

Malicious code in adverse-gold-halibut (npm)

Source: amazon-inspector 5971b856a9b7a473f425b978a6926a2f02a5295c3ce2b21581b76204051fe177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/08/31 11:13 p.m.•5 views

Malicious code in accurate-scarlet-halibut (npm)

Source: amazon-inspector 52cd466fdd3893c4dbfb79ae19cf787f46f109d4cc700cac4122dca23af98b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2025/11/12 4:37 a.m.•13 views

EUVD-2025-120016

Malicious code in nethalibutazure-65 npm...

6.6AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/11/12 3:04 a.m.•11 views

MAL-2025-138592 Malicious code in awake-ivory-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4710da8ec98213a7ea2a941117f3b08ac01514505a45fa95e0b499d4c3e18762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/12 3:04 a.m.•11 views

Malicious code in awake-ivory-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4710da8ec98213a7ea2a941117f3b08ac01514505a45fa95e0b499d4c3e18762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 3:04 a.m.•7 views

EUVD-2025-117510

Malicious code in awake-ivory-halibut npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/12 3:04 a.m.•10 views

EUVD-2025-117093

Malicious code in similar-lime-halibut npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 8:46 p.m.•10 views

EUVD-2025-100785

Malicious code in cautioushalibutz3n npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 8:46 p.m.•7 views

EUVD-2025-103850

Malicious code in manyhalibutz3n npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 8:46 p.m.•12 views

EUVD-2025-103008

Malicious code in practicalhalibutz3n npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 8:11 p.m.•12 views

EUVD-2025-95473

Malicious code in rearhalibutz3n npm...

6.6AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 8:11 p.m.•10 views

EUVD-2025-96447

Malicious code in minimumhalibutz3n npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/11 8:11 p.m.•9 views

Malicious code in immediate_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af368b493186e1b0e8552d18ea4c339461cc202ed1524aabfb9678cfbc43b478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/11/11 8:11 p.m.•9 views

Malicious code in minimum_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 918d680ec9e5e29f9eed996fc4c8d8fc17d6df2bd46b9bdf8d7e3452026c7b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
•added 2025/11/11 8:11 p.m.•9 views

EUVD-2025-104594

Malicious code in immediatehalibutz3n npm...

6.6AI score
SaveExploits0
Rows per page
Query Builder