223 matches found
EUVD-2025-121278
Malicious code in thuban-eris-sadr-lacerta npm...
EUVD-2025-113426
Malicious code in framework-middleware-lacerta-loop npm...
Malicious code in hexo-lacerta-colors-deneb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92beecc19abe6bfce9c7df115923850d93afc41c66f1f3c1dbb2a385b4b63f52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111880
Malicious code in lacerta-backend-soap-eslint-config npm...
EUVD-2025-111392
Malicious code in markdownlint-lacerta-solis-nconf npm...
EUVD-2025-111866
Malicious code in lacerta-middleware-procyon-exec npm...
EUVD-2025-111145
Malicious code in mini-css-extract-plugin-capella-lacerta-castor npm...
MAL-2025-148590 Malicious code in testcafe-csrf-lacerta-global (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c9fe738e4d61c04e2ec74182208a69330dcac9da00526c270c09930a40f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143650 Malicious code in inquirer-lacerta-build-octans (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475e7d0078037660a995d748c438866f42b5e35f4eeedbfb1f11d0d005bb3ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144247 Malicious code in lacerta-middleware-procyon-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b28da3265a24a7bcce4680ed10ee0d5aa21f933a37897e5c22f5b5203a960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142517 Malicious code in firebase-tethys-lacerta-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d5ff0f33b8c4e3d791473618cc4821b1a690ac34b74c6f64375aa339435f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143070 Malicious code in grunt-prettier-lacerta-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673afa115104dfb8a556d45232b63297c9af0feff550c9689b7a0bd3a244540a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141780 Malicious code in dotenv-safe-ultra-lacerta-cors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89439455b16a6902882a174b59f5147a826966cbf4cc56cdf6db7f191b9fa72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142050 Malicious code in enif-gatsby-fetch-lacerta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de2f9b8d363ef3c5fd440250303d6b6fd6a231b41e7b92f2ab5ae9881eaa924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142134 Malicious code in equinox-sedna-lacerta-upgrade (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1e497c4a4276f35faa02b0056417115ff74a8c7698fcf9124ddd14717dd13c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121338
Malicious code in testcafe-csrf-lacerta-global npm...
EUVD-2025-124126
Malicious code in odin-hercules-enceladus-lacerta npm...
Malicious code in framework-middleware-lacerta-loop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31df38ca4c3e3277166d99f269c8cc7b1bfd0b00043591dc99a50a8df3940754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...