6851 matches found
MAL-2025-148173 Malicious code in spica-postcss-init-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0dd7516ab206c60ecc4fc90715916d1522813a27c6be01c8e4d65420b4f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114823
Malicious code in csrf-init-apollo-hyperion npm...
EUVD-2025-111736
Malicious code in library-init-flare-pm2 npm...
EUVD-2025-111726
Malicious code in library-pulsar-mini-css-extract-plugin-init npm...
EUVD-2025-112494
Malicious code in init-dione-server-pegasus npm...
EUVD-2025-112487
Malicious code in init-kastra-leda-canopus npm...
EUVD-2025-112481
Malicious code in init-subscription-callisto-europa npm...
EUVD-2025-112479
Malicious code in init-wezen-umbriel-hyperion npm...
EUVD-2025-112477
Malicious code in init-xenos-forever-grus npm...
EUVD-2025-112476
Malicious code in init-yildun-proxima-async npm...
Malicious code in init-solis-gravity-proxima (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce95d071c98aca7f71a3d08c4ff496456f80f37ec606612dbba7ad6d14bf5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in library-init-flare-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd269a356ae3f884d25ed3afd367540fa7f952b3a55f8746d6c3a7ab5ef34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in node-sass-process-wolf-init (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5009110c757b0598a61838ec0b3547d6aecab8a31eefd10856eb59291fa0ccda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in odin-carpo-init-altair (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84df6db1ad28199f71552122f364b369efb4868373a65e0ed553444b217fb422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in process-init-ignite-regulus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2a7d7a22bee9c6cbc25e4eafaa2b8204550e9878e62c1a1daa58a95ef584e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in puppeteer-init-eclipse-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2418e40c239a3fba75ffa4648edf93cf9cd268bb4849448363e5022edb4c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113121
Malicious code in got-umbriel-bootes-init npm...
EUVD-2025-113543
Malicious code in forever-init-hermes-electron npm...