409 matches found
EUVD-2025-114088
Malicious code in enceladus-auth0-leda-sadr npm...
MAL-2025-144078 Malicious code in jwt-leda-framework-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb4f8cb8d4f557c3034d71e7ecaf0ff765c06e1a8805438ce959a7d22ca3637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148633 Malicious code in tethys-slides-leda-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d05fa4e5b5360c657a9ad23075e841841743c8b552df1366a80627b9d5694592 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113610
Malicious code in firebase-leda-octans-postgres npm...
MAL-2025-140930 Malicious code in commitizen-fetch-leda-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ad32909ada1383cfdbbe1faf4ff59ab81ad25641643f4c43649a502a9ae0e97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144285 Malicious code in leda-pino-pretty-command-postcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce119a64f69bf04c213d4d6ae4eb4186c8268e2283415e92a5a68319226bb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144290 Malicious code in leda-rigel-antares-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be301a42f033b5a9ea4c10f77415df52a52f4f062a65466b42ffb532f5484804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144269 Malicious code in leda-eslint-leda-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0de403fbc94af61fccdd6163d20a9945416d14997fb6cadf1babb2b5f9472d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146311 Malicious code in pm2-run-script-eslint-plugin-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142573 Malicious code in forever-proxima-node-config-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b732624153fce00320a627aa1ffdc3de2a3f8f88263b9a60c079022a0f486d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148321 Malicious code in stream-leda-auriga-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b525d2e79ef4e291e46c88814c73119552dc5a92d8c9f11ab0f740660fd2555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141092 Malicious code in convict-superagent-leda-titan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71af2c3d51c8ab2f3f8f9b9ea4a0bbf0fb1e52a90372ef96a0e8c2fabd93a69d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145428 Malicious code in nightmare-backend-babel-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91103deb94c614fbd1a4df900ba457667e63c12a896906cbb59532aa2c131aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149793 Malicious code in yaml-leda-farout-kinetic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b84e713521d8bb7553f1d14e06b9c4cba1e451a5100e82149ecf169a6e37a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143518 Malicious code in ignite-leda-framework-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c8e962cc443d3c769a93da076a5922db0b0a446f38de08dadcd7bf23a644230 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112332
Malicious code in jabbah-leda-install-eslint-config npm...
EUVD-2025-121965
Malicious code in sirius-leda-algol-flare npm...
EUVD-2025-111343
Malicious code in mdx-puppeteer-spectron-webdriver-leda npm...