3653 matches found
MAL-2025-146493 Malicious code in prettier-plugin-markdown-rocket-jwt-spica (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e316f717f951684854f53cc9146802095eb05c75ed1e3c191dde9f06c5ce10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139646 Malicious code in atlas-jwt-antares-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98c8e4329229fbcc553c2ab25a7908722a9425806a82c7c46aeb6def65c0371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143999 Malicious code in jsonp-jwt-avior-postcss-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d24d5177d5a69fe4e89ff96082eb699b3dc32aef498477c15da8c7939e6d4938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140559 Malicious code in ceres-configstore-jwt-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b37125288f59175aae4e6dc61e0ccea7b4160d5711e3420d95b347159ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142673 Malicious code in foundation-sync-jwt-dependencies (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763efc2d7e662922249fb41abf295d83acb6a6eeaac78e28e2930207857b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148992 Malicious code in update-chai-non-blocking-jwt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf2732f6a507f3ea2e09ca7ff7251f8705a48a4d88fad8e4c2827383fd31c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123564
Malicious code in polaris-nashira-jwt-betelgeuse npm...
Malicious code in dynamo-jwt-figures-convict (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd3975230bea9be10d63c55ca1aad40d879ee3f650bf54db20e9824353ae13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112029
Malicious code in jwt-readable-registry-soap npm...
Malicious code in ceres-configstore-jwt-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b37125288f59175aae4e6dc61e0ccea7b4160d5711e3420d95b347159ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115548
Malicious code in ceres-configstore-jwt-chalk npm...
EUVD-2025-112024
Malicious code in jwt-tethys-eleventy-request npm...
EUVD-2025-122664
Malicious code in remark-wolf-jwt-electron npm...
EUVD-2025-114340
Malicious code in dotenv-safe-pino-pretty-weywot-jwt npm...
EUVD-2025-112040
Malicious code in jwt-foundation-kronos-gravity npm...
EUVD-2025-112031
Malicious code in jwt-pm2-sirius-dione npm...
EUVD-2025-115621
Malicious code in castor-kronos-jwt-convict npm...
MAL-2025-144081 Malicious code in jwt-nebula-module-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9bff033dd6f4cd1ea320753374935ff75fd394a2a0fbd8a15fcfa1243ddaa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141971 Malicious code in element-ui-jwt-uninstall-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5a60826ce2dae0b128158911da5fd082c31135b1f850b0e1134ec983ed2dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...