210 matches found
EUVD-2025-123525
Malicious code in postcss-loader-galaxy-kaus-cygnus npm...
EUVD-2025-120165
Malicious code in yakutsk-dotenv-kaus-capella npm...
MAL-2025-141306 Malicious code in css-loader-kaus-prettier-plugin-markdown-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c520d0a4a8fead49be08d7a48aa69a9c1ca93479e5758acbfae5f2819a1c65ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zenith-npm-kaus-proxima (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b8caf1c1af4b970fe30f56c9e9ebc3ad4a856d8311c24ea3cf0b79665e685c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111961
Malicious code in kaus-nightwatch-uninstall-envconfig npm...
EUVD-2025-114109
Malicious code in eleventy-kaus-cz-conventional-changelog-websockets npm...
EUVD-2025-111918
Malicious code in koa-kaus-sirius-draco npm...
EUVD-2025-122073
Malicious code in semantic-ui-kaus-install-centaurus npm...
Malicious code in kaus-elara-relay-development (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c55997285779079206d39209f938d28c698c67eebc5704e9a8b02cafa6a34d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124585
Malicious code in nebula-bootes-dependencies-kaus npm...
MAL-2025-144136 Malicious code in kaus-auth0-dione-redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8daa66d3ad3bc016afc3ec7e198370914aeb3104fbc6b0d6d953e52ed5be7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147928 Malicious code in shelljs-sedna-kaus-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bd92185d5df059e6ea16e930861c0940b5e505fc65388e18f02aa9ea6e53dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147451 Malicious code in rimraf-kaus-despina-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 440575175b8259dd2dc93390fc2ef519cbfec2dbfba191535b58896c6a7778e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144140 Malicious code in kaus-dorado-hyperion-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8659173b63fc0521c5da9433000bf134a4cc63464820c15a17a0fabc844a3ef2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145279 Malicious code in nashira-kaus-xanadu-webdriverio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d43d7c01125c927a86df8b645d2887c70f72bf5c3651162f0d10a47915acbbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111976
Malicious code in kaus-bellatrix-async-astro npm...
Malicious code in galaxy-vuetify-kaus-global (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2033820f97f916e773d13ef8133bfd0610ebcff696815f0c5eb8325a51bf919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in farout-changelog-apollo-kaus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c724dbf3bc227757e4c0bf560f5f7313bab426730af0b9d0c024502630d4c8c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...