224 matches found
MAL-2025-140865 Malicious code in colors-typeorm-docusaurus-lyra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b5f3eaa9e3a331331b7bd292f7e94781459a94ed659a959e5e6cc775b05639b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147175 Malicious code in rehype-lyra-iota-bulma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14a65634f2c9482704751a1262d96626592d9ab3dcef6f375979e96c07ce110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111502
Malicious code in lyra-leda-css-loader-orbit npm...
EUVD-2025-115295
Malicious code in cli-ursa-lyra-middleware npm...
EUVD-2025-123763
Malicious code in phoebe-lyra-jovian-pegasus npm...
EUVD-2025-111509
Malicious code in lyra-elara-mongodb-firebase npm...
EUVD-2025-120899
Malicious code in upgrade-selenium-nodejs-lyra npm...
EUVD-2025-120151
Malicious code in yakutsk-titan-lyra-impulse npm...
EUVD-2025-120815
Malicious code in venus-lyra-fusion-janus npm...
EUVD-2025-111412
Malicious code in markdown-pdf-pavo-lyra-eslint npm...
EUVD-2025-116488
Malicious code in astro-phoebe-meissa-lyra npm...
EUVD-2025-114535
Malicious code in dependencies-lyra-forever-heka npm...
Malicious code in upgrade-selenium-nodejs-lyra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c05fac68d2ae84d2d004354b5f094461e364e0f684064354fb8cd27ba37ae1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111805
Malicious code in less-cors-bootstrap-lyra npm...
Malicious code in protractor-dynamo-lyra-supervisor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd3577ae452df631ceffc6b04b9bf8055b4794ac4bc1c794b37786a83638dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111503
Malicious code in lyra-kastra-nodemon-cz-conventional-changelog npm...
EUVD-2025-122650
Malicious code in repository-lyra-react-bootstrap-ursa npm...
EUVD-2025-115882
Malicious code in bulma-nodemon-lyra-enceladus npm...