15415 matches found
Malicious code in sinta-lontong24-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2428447445ac1b51642eca62df9bc195d367eb5cd9b5beca9244ba13a47eee13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-58988 Malicious code in tomi-semur93-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a78f048ec10f407c9f7a4514c1d6f1519a78841ddaeea3d7a8ecbc603c8b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-58483 Malicious code in rina-lontong40-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d853ca8a3a6fdd9ab442e70f8d610c0694c6066bb8085bbc43eb22e1a14440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-57129 Malicious code in kiki-empal87-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b255dc19f15d79e4a3b3611c133d24cf90241fa66cd521bca1a53e73c4dacd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-57270 Malicious code in kurniawan-naget27-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61971ff3f4609a01e4864558c4215b8186767640706b3144f66abda7b95a4465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-59661 Malicious code in yanti-saguer40-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a9bccfa36dd1a66d8f8d7f58ef9126483136ad485a954d2ba82986e1867f258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-53773 Malicious code in iwan-mendoan56-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3233aca0cfc334d60fbbd5bfe2770248bead0e4c154ad606679a42c13a8cb140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zul-jus81-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595def466efd3b73bbb82088f6ec9608b6f69fc6e4262e57a4a6700225cc719e The package zul-jus81-sluey was found to contain malicious code...
MAL-2025-49040 Malicious code in simple-import-sort (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc5caceb82a60c3342bf66bc4d6a60a268d94712079783637e89a40b6f374122 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48989 Malicious code in bernie-plugin-l10n (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd6d3c0bbb9843d7995ddad49f2b4142829723406f19e006a25df0ff156e9451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview jito-shred-propo-excutor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious code in vite-manual-chunker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2466db729b423d58b084a5f99834cfaf8c62af4179350ef30978e32f36b50fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in webpack-css-load-branch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebc3a0cfad4acfa46f4ea9e57edb732f20403908d855eca202b5ad08df232468 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in aptos-protos (npm)
The package aptos-protos was found to contain malicious code...
Malicious code in rails-dom-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c71a0792e9dc0f14b43ce18d9e3c77d91946237916717b87a53222fb8fec287a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in solarpeng_node_eval3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 238f0c415626856e32367580d06f3d811603aaa0c8a73f6ff7e4c9a0f9452c13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in solarpeng09 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6045df4a0e5e5868d4c68eb60bd906129c7659cae8c241c253675bcc7d56bd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2020-28457
Malware in sbrugna...