25399 matches found
EUVD-2025-111574
Malicious code in loop-zenith-chromedriver-kronos npm...
EUVD-2025-111302
Malicious code in meissa-loop-uglify-js-protractor npm...
Malicious code in alphard-express-pulsar-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe342497592d9aebcac597ddb7000c2a6548ce707730f2dcc2279c5cdf0f22d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in apollo-docusaurus-postgres-kronos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b86bcf345f5ebad91a43153328a26edc31b5f6c613212b4d22fc7796758a597a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in babel-playwright-luna-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 386e381d89b1d096d764b416362ba70740124f35f6bd65f19f671ca6656b8881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bunyan-promise-mongoose-restart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53bb462501821db097afe4d817964df59b4d319045bf01e3471e2e443cae8cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in chakra-ui-nodemon-metalsmith-loop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fd1864b9a5129d2c4228d9955e4d3dc9c799a3aa1f4b18ba2932dd5c4fcdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in concurrently-umbriel-jabbah-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6217a3470a4faa8cd8f45cc9db7f1cb2c9a4c9c6119b0954169918df22276ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in duplex-winston-loop-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a43e2d71c5eae6cd6f7c189f43194e31c47478b8fe2987a3495d58736c1caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in epimetheus-regulus-sass-loader-uglify-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ee18d4709d88ba8bd65ce29f6d0c2c42a6ec04ffd410f7c61eb189f5442f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in husky-loop-writable-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03548b01ada9be93ed0fb55d38631a5a7df1b6c6fd760240d194a579d9177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in loop-ophiuchus-fetch-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0506250f20544e8ea50d856e84eda191a6177d7846e809be15c6038a85dde340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in loop-sadr-mensa-cassini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f37c6d94c5110e973d1ee3f2bb26b12db11bfa2e35bc1e57032de8fadb1cab64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in phoenix-ophiuchus-webdriver-mocha-zenobia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cc99ba026da8566d257a516cae1495a6154a7a20dbfb8f5dcb605c6e138958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rate-limiter-loop-npm-farout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06092420b8957a0da75aae83861ae673c840b2bcfa86993780d030e2509e0261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sirius-pyxis-cypress-cressida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99e2e262d6206a7c37e45b03e962ce60c1174ec7a7502ec42642eb7dc5a3fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in stream-loop-parcel-npm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38929f7a646ff8d1293e4c17a38a88606996a4ab7d34e053fdd1cfb786e8e510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113107
Malicious code in graphql-loop-module-ultra npm...