746 matches found
MAL-2025-147502 Malicious code in rollup-magellan-hapi-puppeteer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3490d9c59832ca44c7885eff71bfbba3bba091d61f91ffd6962dbd3829a1f92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143196 Malicious code in hapi-prompts-markdown-pdf-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70611763ec0820cf06f80352089a3d6edd38c7a1491891daf9f0bd9f35c623fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143175 Malicious code in hapi-antd-dione-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ba1fa7ad9b95e2d278e65f7fd0570ddd801f915a2455530317272b4893438e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146423 Malicious code in postcss-start-hapi-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcf0d50e2bd565e4ec443a3833a88464d43936318833ccf7ee79429465a63bc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141305 Malicious code in css-loader-hapi-webpack-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206c0e0e9e26400badf51e77a0da3c872553ce721b95403abc7cd4bee874bcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112931
Malicious code in hapi-csv-zenobia-xanadu npm...
Malicious code in hapi-dynamo-janus-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77ec975125b6a288a6fd1ecc2cf29882839c1001107382b5ea3e6cb491ef263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hapi-hyperion-corvus-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f90757f777313f495bbab629a08d287877e9996063f135538f6c4a9ca5cf61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140023 Malicious code in blaze-hapi-cordelia-start (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2782e9e52c196340de0e31caff03aa3bee08b7d416ac2a4d310277517eed08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142391 Malicious code in express-superagent-javascript-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b794550053245b66618b7061c10440b97b535bc4dad030d638689510877234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142157 Malicious code in eridanus-typeorm-pino-pretty-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0683bde0e21dbe5cb71e19dbaf130bb75c894f9d3a49978baa10d1b94699c683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143780 Malicious code in jabbah-hapi-eslint-config-centauri (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b0ecf467e4e7f27d78ea151d34cd5034fc94e10302afbc83903eab71ff875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116769
Malicious code in alphard-odin-radiant-hapi npm...
EUVD-2025-113953
Malicious code in eridanus-typeorm-pino-pretty-hapi npm...
EUVD-2025-112937
Malicious code in hapi-antd-dione-xo npm...
EUVD-2025-111968
Malicious code in kaus-hapi-css-loader-polaris npm...
EUVD-2025-120957
Malicious code in uninstall-xanadu-weywot-hapi npm...
Malicious code in hapi-run-script-draco-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7496f52ceb1b572a541bb3ce44c44f647500abd52b1015c97b8a6e7de1ea336c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...