746 matches found
EUVD-2025-177095
Malicious code in postcss-loader-hapi-publish-event npm...
MAL-2025-189778 Malicious code in supervisor-config-hapi-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3204291ed7b322002b6447d22612949989d91607e7eab0d2045e2f8adc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178607
Malicious code in hapi-dynamo-archaeoastronomy-leda npm...
EUVD-2025-179080
Malicious code in equinox-xerxes-hapi-gravity npm...
Malicious code in graviton-hapi-less-loader-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb8fb65ea2c82a7ebd036fb556fb70c2c9cb967106c4ea3b82b1936b540d8b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178608
Malicious code in hapi-cross-env-subduction-mongodb npm...
Malicious code in iota-hugo-mongoose-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a38d5dd37b1d3a02248bee4b3d4f536393bee7b92c3c8e07a12e1e35b6cfdb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hapi-zenobia-superagent-geodynamo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13954284061f6dff2946a7a8ea7e292f2e0a5c843b31c80ea8709b8cb7d11028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pavo-hapi-hyperion-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47751cb87177ae728651660085900b0615c3a7eb42d490ffb25a15ae74a4b4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177846
Malicious code in middleware-antd-hapi-nightwatch npm...
Malicious code in supervisor-config-hapi-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3204291ed7b322002b6447d22612949989d91607e7eab0d2045e2f8adc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175913
Malicious code in transform-carpo-charon-hapi npm...
EUVD-2025-179475
Malicious code in csrf-callisto-hapi-nextjs npm...
MAL-2025-187574 Malicious code in janus-hapi-ganymede-solis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c51d1d80490a8edab4326366977f4ecda45c1d5cf1496de3d5227d9066fd684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188780 Malicious code in postcss-loader-hapi-publish-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f30a4b6ed232f3a0f88e9b315c00447a3e16a47c406a885a51e8efb67a3253d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190067 Malicious code in unuk-hapi-cross-env-nashira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d337623dc4dce49e5bb465b6ab727eee58fb69714217f60caaed1fcd72d1c14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179953
Malicious code in build-hapi-registry-quark npm...
Malicious code in build-hapi-registry-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d83f597fe639d7acbcf9e97540b25f2a624333b18013c7061e016e06fa331d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...