25398 matches found
MAL-2025-140703 Malicious code in chariklo-mini-css-extract-plugin-rollup-google (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4885d904321f1e54289c15c6b9924e8d678610816b44065f535762c4433516f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114281
Malicious code in dynamo-kronos-loop-html-webpack-plugin npm...
EUVD-2025-114873
Malicious code in cressida-loop-regulus-tailwindcss npm...
Malicious code in vega-xanthus-websockets-farout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ed8c68cd57c4176e6cba9e6be48d70bab1314adc77f213fccc63db194af483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142772 Malicious code in gacrux-loop-mira-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8504735f7c1860b4b37f147f2c23fa6eb65656ec17bcfacb50d61c6f446fe73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lint-fusion-relay-cors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9322db6c61179b5f1ab62da86bf27d041ddedc1906655103caf797881f1b9785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148944 Malicious code in umbriel-mongodb-pegasus-rocket (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659c7ebb25050f6cc449c809f7c3eace227431e179d516051f3a1aa1809ab659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111735
Malicious code in library-loop-centaurus-request npm...
EUVD-2025-111579
Malicious code in loop-style-loader-webpack-promise npm...
EUVD-2025-111576
Malicious code in loop-xerxes-markdown-fomalhaut npm...
Malicious code in aquarius-jwt-bulma-webdriver-mocha (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6563a0cc256be828325c533ef3b8a3fa946a92f767374fdfd71f591644edea79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bulma-jest-native-loop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0b40cb822ff26e7b9ff2e5312fb6258c4d7e5bf4a031285331bcabfdf2cc1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1facc111643156c60818083a3221391ae68c90805f74a1411946c0be5cc3821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dynamo-nodemon-bulma-dependencies (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bcdbdeb2b193f13228505dc1bd26683ae0fa84814258d565bd822beae73fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in framework-middleware-lacerta-loop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31df38ca4c3e3277166d99f269c8cc7b1bfd0b00043591dc99a50a8df3940754 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in loop-mensa-xml-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588fd6e066e2dd3092837d1df974d64a5ad7b55e0b95e3888d7853b746fbb1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in odin-loop-orbit-mensa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc0f20bd252abf7728a486e9acb87f99bbda43e9c78c910ffc2f1640431f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in restart-loop-quito-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3b08b626c1b721e934cc6da12eada881e281233c8d27a95f2ee119e8031a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in scripts-eridanus-duplex-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc40e9b3651a910d7a97424e0a6b2f9dfb784f58b1ac169adad47c54b88f1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...