Lucene search
K

5 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 4:47 p.m.4 views

Malicious code in azhar-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e19e9ef3834858b66d6b3bd17ce8e06b52ab8dbe34975357b84ce427bac40b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSV
OSV
added 2025/11/12 4:29 a.m.3 views

MAL-2025-142365 Malicious code in express-antares-neptune-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc65152960b76a24c132fd022c57baa610440d27e99fd30117a7f067c2dfbb08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
OSV
OSV
added 2025/11/11 4:25 a.m.2 views

MAL-2025-86947 Malicious code in jaja-enting29-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b9c53fdea68998a8a75c25ad2ea23a02f8570ae998945bcb390505dd0b429d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
OSV
OSV
added 2025/11/11 12:41 a.m.1 views

MAL-2025-71282 Malicious code in unfortunate-orange-gecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c3b2e874c8b0320cab73900dd384922f639fb9110503d3d2a8e82610b41d8d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
OSV
OSV
added 2025/11/11 12:17 a.m.3 views

MAL-2025-65965 Malicious code in vida-mendut53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb3434b5089f534b371c9eca8d4a5ff2383c6076dce26f55b3742eaaed22cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
Rows per page
Query Builder