735 matches found
MAL-2025-143181 Malicious code in hapi-csv-zenobia-xanadu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4356fae40d4893d8d4c9ab69e759b5bd78aaefd6a7b8e0a47d60c7a2eb1ccdca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112935
Malicious code in hapi-charon-prettier-plugin-markdown-aquarius npm...
EUVD-2025-121492
Malicious code in sync-wasat-deimos-hapi npm...
EUVD-2025-122420
Malicious code in rollup-magellan-hapi-puppeteer npm...
EUVD-2025-115896
Malicious code in bulma-chalk-rate-limiter-hapi npm...
EUVD-2025-112630
Malicious code in hyperion-jsonp-rimraf-hapi npm...
MAL-2025-144145 Malicious code in kaus-hapi-css-loader-polaris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e3895c78a71fd2ea5e6ab9db681efe43891f8ab1c3ea3f392a530f981768a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114316
Malicious code in draco-hapi-luna-gravity npm...
MAL-2025-139333 Malicious code in alphard-odin-radiant-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061b018c3c576a12e91b1414b540a920cf4d9a62aa4d6901c07ab7ef1b75bd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143176 Malicious code in hapi-betelgeuse-elektra-auth0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cac274f03345eff3a6a95ef1daebb33b6da23343c6402e2c78753db54db027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139983 Malicious code in betelgeuse-hapi-dynamo-scripts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a35da202899a19f4d2770c7c1cd9956c0a0b82316c6be52a6712a1fbfb1568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111773
Malicious code in less-nconf-global-hapi npm...
MAL-2025-143177 Malicious code in hapi-charon-prettier-plugin-markdown-aquarius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e7e91d4a997d8e612394d189efa0a0befcc5026cc5b99a3fe32f91a842b1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139336 Malicious code in alphard-pipe-hapi-remark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4de964b73b312b6b42e268b5dac8158264ef0225d09240b67e80b973cc7da2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143179 Malicious code in hapi-commitizen-update-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b26b06dc60a7b6a8944c637b6cdbf741968df7c18314dee31911816cc31f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143187 Malicious code in hapi-link-dotenv-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7aff41ffcc47a9ce5cecc9896e60e7457b7563c695aa7759fd139e79d5032c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141793 Malicious code in draco-hapi-luna-gravity (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f43ca38f4a170173c94afac1558333ea2d8020e9a3392cf0aadf92300b6959d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2017-0221
Malware in sbrugna...