72 matches found
Malicious code in html-webpack-plugin-hologram-stream-install (npm)
Source: amazon-inspector 07f786614246d2d9d6432c8d36c1015a7c75b9a2b3c99baa78f244a48ad6eb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in hologram-oscillation-config-nestjs (npm)
Source: amazon-inspector 94fec5f581224d5aae6e79087d88350c41d0a91a59e1bc1e4fef8e66c48b7c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in hologram-jekyll-radiometric-bellatrix (npm)
Source: amazon-inspector 34423c93c7a5b13e9f1e0d5bd862054c215574cb60b2d0c3c0fc097a038bc7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in hologram-ini-elara-dysonswarm (npm)
The package hologram-ini-elara-dysonswarm was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in hologram-cors-quito-string (npm)
The package hologram-cors-quito-string was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in hologram-taurus-lightyear-auth0 (npm)
The package hologram-taurus-lightyear-auth0 was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in hologram-oscillation-rehype-await (npm)
The package hologram-oscillation-rehype-await was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in hologram-meteor-scorpius-jabbah (npm)
The package hologram-meteor-scorpius-jabbah was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in eventhoriz-hologram-uranology-vega (npm)
The package eventhoriz-hologram-uranology-vega was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in eris-primatology-nightmare-hologram (npm)
The package eris-primatology-nightmare-hologram was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in astrochemistry-cosmicsilence-hologram-zephyr (npm)
The package astrochemistry-cosmicsilence-hologram-zephyr was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in aldebaran-hologram-resonance-enif (npm)
The package aldebaran-hologram-resonance-enif was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in aether-hologram-genomics-xanthus (npm)
Source: amazon-inspector 91fd696e3d7bb6d4aa0cae1f564fd1879823fe90d9e33b77c646528afe0a0d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
EUVD-2025-176062
Malicious code in tardigrade-virgo-hologram-yaml npm...
Malicious code in hologram-oscillation-config-nestjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94fec5f581224d5aae6e79087d88350c41d0a91a59e1bc1e4fef8e66c48b7c35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175544
Malicious code in winston-html-webpack-plugin-hologram-meteor npm...
Malicious code in hologram-jekyll-radiometric-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34423c93c7a5b13e9f1e0d5bd862054c215574cb60b2d0c3c0fc097a038bc7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in html-webpack-plugin-hologram-stream-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f786614246d2d9d6432c8d36c1015a7c75b9a2b3c99baa78f244a48ad6eb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185391 Malicious code in aether-hologram-genomics-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91fd696e3d7bb6d4aa0cae1f564fd1879823fe90d9e33b77c646528afe0a0d30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...