18252 matches found
MAL-2025-139874 Malicious code in babel-stream-loop-corvus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 065a4392b21c6e73e1e73e96a3c48ac9c44bca69e156c43e03a58cf6fb3623c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111589
Malicious code in loop-geckodriver-ceres-neptune npm...
Malicious code in sqlite-transform-jest-loop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4edbfb4264847c384da631ea6bc0589e5e25634a72695e65abc456edddc215b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121964
Malicious code in sirius-loop-axios-hydra npm...
EUVD-2025-116138
Malicious code in betelgeuse-airbnb-cosmiconfig-loop npm...
EUVD-2025-122031
Malicious code in server-command-lyra-loop npm...
EUVD-2025-115278
Malicious code in cluster-loop-ignite-telesto npm...
EUVD-2025-122538
Malicious code in restart-loop-quito-antd npm...
EUVD-2025-123280
Malicious code in promise-loop-server-farout npm...
Malicious code in json-ophiuchus-jovian-writable (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d659d7f90a9182f59291cdce9db87464dc18d0fafa9c045337b245b6bd786c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d632874fbec3cd15f7617090139bd5b08fba0e32ae4c061de45fdb9738e80ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144536 Malicious code in loop-style-loader-webpack-promise (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c401449ca2d854d6f789383555083c91f77978a2abd1a287fcc81f24166626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145074 Malicious code in mocha-eris-spectron-forever (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efc9e761073af4b945f488bcf38fcfe267283030cd5f0c9994ecbc03975fbd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144529 Malicious code in loop-mensa-xml-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588fd6e066e2dd3092837d1df974d64a5ad7b55e0b95e3888d7853b746fbb1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123342
Malicious code in procyon-cassini-loop-kinetic npm...
Malicious code in odin-loop-orbit-mensa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc0f20bd252abf7728a486e9acb87f99bbda43e9c78c910ffc2f1640431f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120716
Malicious code in vuetify-loop-convict-run-script npm...