791 matches found
MAL-2025-143836 Malicious code in janus-slidev-typeorm-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81622a3bfb68436593cee4550ccd8873459ebb5f4d186618fbb90391442fab9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112530
Malicious code in ini-chalk-cors-colors npm...
MAL-2025-149680 Malicious code in xenos-halley-nextjs-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea90a89f7e2f9754822f85568e845254ae760b8796313aa877aac600d48ae5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112520
Malicious code in ini-meissa-taurus-avior npm...
EUVD-2025-112512
Malicious code in ini-pyxis-arcturus-izar npm...
EUVD-2025-112516
Malicious code in ini-playwright-kaus-weywot npm...
EUVD-2025-116212
Malicious code in backend-ini-sedna-ophiuchus npm...
Malicious code in ini-chalk-cors-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e056bc82713174866f848920d37b5631378c0586896ed08ae0f33e06e27aaaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122384
Malicious code in run-script-await-ini-ariel npm...
EUVD-2025-112514
Malicious code in ini-pulsar-cross-env-quantum npm...
Malicious code in ini-delphinus-fetch-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d40676848a894fe55a348008ca0bd6c6005b42422e1675050fcd0adb0f43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in duplex-vuepress-ini-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a17ac0306d65a92bb6331bba707a8b9b14665480db55f8345b768c957e75f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114903
Malicious code in cosmos-eslint-transform-ini npm...
EUVD-2025-112531
Malicious code in ini-carpo-async-unuk npm...
Malicious code in ini-draco-frontend-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9e64174e135c44aee880ca64de4b7d5765cb2dd9c6917bf4f952af0c5820e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112508
Malicious code in ini-rigel-framework-helmet npm...
EUVD-2025-112510
Malicious code in ini-rehype-norma-weywot npm...
EUVD-2025-115437
Malicious code in changelog-hydra-hugo-ini npm...