759 matches found
MAL-2025-143591 Malicious code in ini-forever-foundation-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276bf94003b7622e515f3e0a9f9a371f2d64a3f3045c39359a4cb9e0343543a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143605 Malicious code in ini-rigel-framework-helmet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e6a460eaceaef16c9333b123fd0edda2d6049e201f24ea333cd2252d55a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147759 Malicious code in sedna-centaurus-algol-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0716f67cbdc69220f2797ddf07dfd1a2d184b4a73e4c7c59e13a256a2af2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112521
Malicious code in ini-lynx-triton-forever npm...
EUVD-2025-112506
Malicious code in ini-sirius-ursa-prettier-plugin-markdown npm...
Malicious code in perseus-playwright-ini-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed04bcab08314eefd54ec25d25b978908a323fd77c17eb836416092414d907fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ini-rigel-framework-helmet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e6a460eaceaef16c9333b123fd0edda2d6049e201f24ea333cd2252d55a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ini-playwright-kaus-weywot (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c10504768cad4ee5f79ca1749353e747f46b0967598af7e3d7504dc839a8f3a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112526
Malicious code in ini-draco-frontend-quark npm...
EUVD-2025-114689
Malicious code in cz-conventional-changelog-ini-equinox-enif npm...
EUVD-2025-113194
Malicious code in gemini-server-ini-sagitta npm...
EUVD-2025-114603
Malicious code in deimos-sass-loader-ursa-ini npm...
EUVD-2025-112525
Malicious code in ini-duplex-mini-css-extract-plugin-stream npm...
EUVD-2025-111431
Malicious code in markdown-morgan-aether-ini npm...
EUVD-2025-112019
Malicious code in karma-atlas-bulma-ini npm...
Malicious code in auth-non-blocking-ini-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116070
Malicious code in blaze-reveal-md-auriga-ini npm...
EUVD-2025-114858
Malicious code in cross-env-dactyl-regulus-ini npm...