10278 matches found
MAL-2025-143690 Malicious code in install-uninstall-mira-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e84c856cd0e9886740c1235d889f235ed09f42e79e4b38c5ce76c4e8b49ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116423
Malicious code in auriga-install-express-toml npm...
EUVD-2025-112546
Malicious code in indus-install-procyon-xenos npm...
EUVD-2025-111869
Malicious code in lacerta-luna-install-alphard npm...
EUVD-2025-122078
Malicious code in semantic-ui-dorado-install-version npm...
EUVD-2025-122998
Malicious code in quark-foundation-astro-install npm...
EUVD-2025-112055
Malicious code in jupiter-install-selenium-dotenv npm...
MAL-2025-145645 Malicious code in norma-janus-install-arcturus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf62f55865ad3583ff2538e038e4062ec8df240b1b3d96090545a4b0a9521548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115813
Malicious code in callback-antd-transport-install npm...
MAL-2025-143689 Malicious code in install-uninstall-eridanus-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a783a109f2ecd48aebe6cfed3f14cd877e84d3a42b39daae06e048a0c8599f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143682 Malicious code in install-rimraf-nova-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a6bb9d55fc9bbf225f87ea52b6f59a890034af0ab668485ba8c1b7b3b42f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140552 Malicious code in centaurus-rimraf-install-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a20fc42722644aab92bd2ddc6bca3420470cac4cf0326c16962a9a81849fad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141473 Malicious code in dagda-install-global-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b312c96b134e33169689e7078f37ab23390dbb17c7e278ee6a0d2054c08074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143148 Malicious code in halley-install-pavo-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf4e6027a9e5ed23f0c187619d11b350f940038da89434376ae24c57a4c84cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148469 Malicious code in taurus-install-eslint-plugin-sadr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c242bab0d2e207a9faadf024324d17dcbe6f03b5757d823bc421e6a72ee91f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146904 Malicious code in quantum-install-puppeteer-link (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b724acaff6d5a6ae464eb4bc6952dd230597cc047db7f7a926acc4906c1510a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in halley-install-pavo-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf4e6027a9e5ed23f0c187619d11b350f940038da89434376ae24c57a4c84cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122157
Malicious code in sedna-grus-install-zenith npm...