25501 matches found
EUVD-2025-113706
Malicious code in farout-cz-conventional-changelog-loop-regulus npm...
EUVD-2025-116138
Malicious code in betelgeuse-airbnb-cosmiconfig-loop npm...
MAL-2025-149769 Malicious code in yakutsk-got-antares-enif (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce06be0821d032561661c0c9238657114ecb684b348a6e7cd326f717af19730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143027 Malicious code in gravity-jabbah-magellan-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5229ad0bb0abdb1698460191f585f244fb025a2accd69fcc65785d3005ed69d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143346 Malicious code in hexo-mocha-carpo-element-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5f20c394984fce4284f9db4adeacf96ffc5d765f98c1d2a7e82d68f5c2597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147472 Malicious code in rocket-koa-query-loop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e9a1af132a8126638baca3a85673704533f89020924385e0120402a4b1d9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147320 Malicious code in resolvers-cygnus-subscription-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cef4304d5ae62ad5925a3d7772113cfab7f2f31222305bbb2d2f22097c3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139874 Malicious code in babel-stream-loop-corvus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 065a4392b21c6e73e1e73e96a3c48ac9c44bca69e156c43e03a58cf6fb3623c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144813 Malicious code in meissa-loop-uglify-js-protractor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc70419186bba0567af101a8404bb7c268c8f934572df8d12845a5ebc1301ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140253 Malicious code in bunyan-quark-loop-celeste (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe676a6d3e7e3665526bef653839a527974f4af6ce865b9901c31d442682f32b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140703 Malicious code in chariklo-mini-css-extract-plugin-rollup-google (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4885d904321f1e54289c15c6b9924e8d678610816b44065f535762c4433516f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112691
Malicious code in husky-loop-writable-html-webpack-plugin npm...
EUVD-2025-114281
Malicious code in dynamo-kronos-loop-html-webpack-plugin npm...
Malicious code in vega-xanthus-websockets-farout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ed8c68cd57c4176e6cba9e6be48d70bab1314adc77f213fccc63db194af483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142772 Malicious code in gacrux-loop-mira-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8504735f7c1860b4b37f147f2c23fa6eb65656ec17bcfacb50d61c6f446fe73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lint-fusion-relay-cors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9322db6c61179b5f1ab62da86bf27d041ddedc1906655103caf797881f1b9785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114873
Malicious code in cressida-loop-regulus-tailwindcss npm...
EUVD-2025-122880
Malicious code in rate-limiter-loop-npm-farout npm...
MAL-2025-147850 Malicious code in semantic-ui-kaus-install-centaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db6ed7182c80f2bff1213f3c1d1b6395ba3709bf4901536c388e34b08b53060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...