379 matches found
MAL-2025-186517 Malicious code in deimos-koa-build-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a36c41fcb310eff78aafc5e8df244c1040a53162533a3e6f7026cd926873e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187702 Malicious code in koa-vega-zenith-canopus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a04af2364592a4dbe9304c1583200538072652b566a0c4367ccac8e31b977f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188323 Malicious code in node-sass-slides-koa-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d901b770938de6417077db7f0e64048574068406c7bf11efcce84fe61d1993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188075 Malicious code in miranda-koa-fetch-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0542faa9fd01fa72c958cf46a1d5a08f0ba4db727709a088052187230321c063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177559
Malicious code in node-sass-slides-koa-hexo npm...
EUVD-2025-178181
Malicious code in koa-prettier-stylelint-link-google npm...
EUVD-2025-177807
Malicious code in miranda-koa-fetch-duplex npm...
EUVD-2025-175491
Malicious code in xerxes-koa-promise-meteor npm...
Malicious code in koa-prettier-stylelint-link-google (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3769d4b81521e90ec08b25681b58a9566408041fe26a44b7c1d5efaf56ff4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177831
Malicious code in mini-css-extract-plugin-sass-loader-rigel-koa npm...
EUVD-2025-175469
Malicious code in xo-koa-metalsmith-perseus npm...
EUVD-2025-178183
Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables npm...
EUVD-2025-178180
Malicious code in koa-vega-zenith-canopus npm...
EUVD-2025-179301
Malicious code in development-rollup-pipe-koa npm...
MAL-2025-188253 Malicious code in neutronstar-quark-dotenv-safe-koa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c51ac63c08154afa26f71278cae2c6f17bf39e6835d2f205cc35e304e1bf2f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122508
Malicious code in reveal-md-koa-venus-betelgeuse npm...
EUVD-2025-122732
Malicious code in rehype-typeorm-rate-limiter-koa npm...
Malicious code in sagitta-koa-io-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...