430 matches found
MAL-2025-143329 Malicious code in hermes-superagent-google-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839f7222c322fbdf927457e0e47acfabbdf8739f68a3152c7bc8f9f55b0b19a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144197 Malicious code in koa-neptune-slidev-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca591866a0d3e7083a8e6c41f35814d002fc420eefffdc1e60ff6f99becf00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116929
Malicious code in acamar-dagda-koa-quark npm...
EUVD-2025-120302
Malicious code in xanthus-koa-cross-env-webdriver-mocha npm...
Malicious code in sails-aquarius-elektra-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a55c0fac4c3569449fdc116417d05fb97f310e65f036c7e35510fb8e9d4bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in centaurus-vuepress-concurrently-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3d17c254d20bfae82b30318943e94b6c475fe6eaa7f65fc00ca1b3cb773d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120426
Malicious code in winston-koa-wasat-celeste npm...
EUVD-2025-111887
Malicious code in kronos-sirius-process-koa npm...
EUVD-2025-120045
Malicious code in zephyr-koa-materialize-phoenix npm...
EUVD-2025-111138
Malicious code in mini-css-extract-plugin-koa-chromedriver-playwright npm...
Malicious code in koa-postgres-blaze-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b6cdae761bee4ee4e8ae8294fde8b8c4d62a37e14f8b704bf9fa3dee5d856c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124760
Malicious code in mongoose-koa-jekyll-promise npm...
Malicious code in koa-odin-aquarius-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5224286352a2ba1a1be9265f826fd979201b470b0eadf7543fa1921604f6f120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111921
Malicious code in koa-electron-reveal-md-pavo npm...
EUVD-2025-114246
Malicious code in elara-barnard-koa-fusion npm...
EUVD-2025-111924
Malicious code in koa-dependencies-jabbah-telesto npm...
EUVD-2025-111907
Malicious code in koa-schema-hyperion-indus npm...
EUVD-2025-111906
Malicious code in koa-soap-loglevel-hyperion npm...
Malicious code in express-markdownlint-koa-deneb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5af99872602a5f7cbd6edad3d03e0270313304601d1cdf9cb87cd3089c9e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...