187 matches found
EUVD-2025-124412
Malicious code in node-config-heka-metalsmith-rimraf npm...
EUVD-2025-112890
Malicious code in heka-webpack-init-prompts npm...
Malicious code in ini-puppeteer-sirius-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f165079f96f534969d007a41855a4d7f2ed41baf135f410520c0d13780012190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112903
Malicious code in heka-nebula-rollup-plugin-inquirer npm...
EUVD-2025-112901
Malicious code in heka-pegasus-pino-pretty-mira npm...
Malicious code in cli-dagda-heka-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50ef1dd0c035a6b8d925ae3fe105e1d5534f9a806ea4b127e43eb8bf0bdc4b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115861
Malicious code in bunyan-heka-spawn-json npm...
EUVD-2025-112902
Malicious code in heka-ophiuchus-cache-europa npm...
Malicious code in heka-express-axios-eslint-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33e9feb5948da23cbdf036738822ea99bdbb64939a1ec88089a7d78643a419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112896
Malicious code in heka-rehype-duplex-ursa npm...
EUVD-2025-115315
Malicious code in cli-dagda-heka-config npm...
Malicious code in winston-heka-loglevel-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b653b39fbd93175eb9c58fed17b6c446545000911327d49ec037d7485efa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149159 Malicious code in virgo-hugo-vega-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c502d4249c975a4bab93ef877ebd30cc2c9b3b46eb73351f5d2bf350f758b9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139360 Malicious code in altair-promise-castor-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c3a1a5a4ff845ee380e66cb7b5ce3ba889f5afd50a6a1ea2e02fd6f0783031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141471 Malicious code in dagda-heka-phoebe-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e78cb483a820d8e1e8684031787f848f86aacfb5b8fd42e52305de62c17bdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143208 Malicious code in heka-mini-css-extract-plugin-xenos-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b17a7f1db0e8cf65d171b6b053a9b54a88580fcb443ea927debda2adbfaa55a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148674 Malicious code in titan-chai-heka-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e8f2fed5c2b90a4dc02ed95b7779ca58c2be25e2092df0e018b44bce9f349b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114638
Malicious code in dagda-heka-phoebe-quantum npm...