722 matches found
Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112513
Malicious code in ini-puppeteer-sirius-heka npm...
EUVD-2025-114858
Malicious code in cross-env-dactyl-regulus-ini npm...
Malicious code in prettier-ini-babel-mdx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b566f92ee775fdadbe70403772b8454710e9712622c79844d941ad37fd3875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jest-vortex-ini-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57921d568b97d6d9305b1a5aa660dc2fc975b01045ac78e3fd2e0b5ed3a82d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121780
Malicious code in spectron-webdriver-unuk-eridanus-ini npm...
Malicious code in fornax-mongodb-ini-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92b178d3023eba948ee956d55dcf075ba19ba31ed8962ead5726e6adc9edbee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149680 Malicious code in xenos-halley-nextjs-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea90a89f7e2f9754822f85568e845254ae760b8796313aa877aac600d48ae5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143605 Malicious code in ini-rigel-framework-helmet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e6a460eaceaef16c9333b123fd0edda2d6049e201f24ea333cd2252d55a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147759 Malicious code in sedna-centaurus-algol-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0716f67cbdc69220f2797ddf07dfd1a2d184b4a73e4c7c59e13a256a2af2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145903 Malicious code in orbit-command-geckodriver-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b739a0c92118c2d9aa0292ccbc802a6043f7e8bd70b043cc3f1cc5df3c628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141251 Malicious code in cross-env-dactyl-regulus-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67417c0546de377a93c13bd911465029d14604266a506e6c88506f7c9d86cd1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143461 Malicious code in hydra-wasat-venus-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a87524dc2b3f47f519c9c541a7e56e09938c109a8cd0a59016f3ba3f8273a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144764 Malicious code in mdx-cressida-ini-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a0afc256ae308bd210e19cb7e9518884975fa81f7bfd69ca7ca2e1ac55bf50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143836 Malicious code in janus-slidev-typeorm-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81622a3bfb68436593cee4550ccd8873459ebb5f4d186618fbb90391442fab9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122455
Malicious code in rocket-graphql-ini-ini npm...
EUVD-2025-122384
Malicious code in run-script-await-ini-ariel npm...
MAL-2025-143587 Malicious code in ini-draco-frontend-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9e64174e135c44aee880ca64de4b7d5765cb2dd9c6917bf4f952af0c5820e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149211 Malicious code in vuetify-ini-framework-commitizen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1ea7eeee9dc7efb74efdee65854ad1c7cafd35be5c51a28e7a4f8938efa4b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...