106 matches found
MAL-2025-101291 Malicious code in deliberate_bedbug_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972401650a112cd9784c349052b926154b29de4cd150b6a0d16229512a07c5e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-69975
Malicious code in hendra-miebogor53-ruro npm...
MAL-2025-98383 Malicious code in takin_fuchsia-66 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f65be342df0535520e911051ad1239bf313231fed198c8925c4f64d031316371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-96203 Malicious code in ready_mollusk_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8363af78542b31e20725daded819ff101e166ba16429e36fc1cb3c8ec1a3c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-85611
Malicious code in ida-keraktelor75-miaww npm...
MAL-2025-67392 Malicious code in concrete-ivory-carp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95180632e1172fd78c5b8da08621e886d94da9d4fc860dcee48fb17e93052d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-64885 Malicious code in putri-gandul89-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31b4da0758a376362e7ede22377309bb46777ace96978de25a7105061149620c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-44373
Malicious code in yanti-esdoger89-sukiwir npm...
MAL-2025-58380 Malicious code in riana-bubur76-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1f6ca124001d1f62894ba9c9951dfafaf426dc39ef3d06aba33db6d98bc78a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-37300
Malicious code in @alexandrsarioglo/npm-ghost-htb npm...
MAL-2025-47421 Malicious code in @strong-energetic/test-banned-file (npm)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security beb2182dad9121d8cdfbd98f321d90cd62cda75f2c4ef68f1a5e22608808dc91 This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials and publishes them to GitHub...
MAL-2025-45975 Malicious code in savanna-yucca-ovl568-project (npm)
The package savanna-yucca-ovl568-project was found to contain malicious code...
MAL-2025-41104 Malicious code in zucchini-foxtrot-yam-jckve (npm)
The package zucchini-foxtrot-yam-jckve was found to contain malicious code...
MAL-2025-7071 Malicious code in @amber-team/sellerly-theme (npm)
The package @amber-team/sellerly-theme was found to contain malicious code...
MAL-2025-7503 Malicious code in @crabas0npm/quo-quasi-neque (npm)
The package @crabas0npm/quo-quasi-neque was found to contain malicious code...
MAL-2025-38816 Malicious code in waterfall-iceberg-ixu008-project (npm)
The package waterfall-iceberg-ixu008-project was found to contain malicious code...
MAL-2025-35596 Malicious code in test-mlw2-junto-filar (npm)
The package test-mlw2-junto-filar was found to contain malicious code...
MAL-2025-40714 Malicious code in zain-kemplang76-breki (npm)
The package zain-kemplang76-breki was found to contain malicious code...