1006 matches found
MAL-2025-157767 Malicious code in kuinsu-lukoi-kinatm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272c645d12f3cb7d3f72973a35367f53775be354126218adb516c5e2910cdc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-160774 Malicious code in muda-poke39 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86d4b456a16125221631ee2b20746acdda677602979d387774d0c0e82b23fbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-157844 Malicious code in kuinsu-uyilu-viakun (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2294a9afeca2aee281441f0d248980939bb93ed13b96b53c3cb8ad99f9087947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-162923 Malicious code in nokire-loklok67 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1c9fe3ad04292bade10206a55b370b3e809157875a84f28e68e3b06a69542c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-169473 Malicious code in uarag-mafsituhai-suf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d5b94707f7d17ff744d6579c66bb3f5a7a5910b54ed0e21828c69323ae580a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120695
Malicious code in vulcan-fork-colors-neptune npm...
Malicious code in rimraf-npm-figures-bunyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e67eca40b604a5fca714a24246f0b0b3cc6af4183d168739c32455e8d84f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112743
Malicious code in html-webpack-plugin-procyon-airbnb-relay npm...
Malicious code in norma-aether-thuban-triton (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34926fe5717955e2b3719df604136815a0cd579c4e9b0a766baed82f8f5dbccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in betelgeuse-node-config-webdriver-mocha-auriga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a6bb0a98922401bd6403c8a219e0615fc5d749430667d02d1d7b9d26dfe6227 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in google-csv-bellatrix-chariklo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d3973375d954986667ca7aa33aa2b77e079ce52e861180f1ea202f3071fdbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in semantic-release-google-warp-vuetify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector befc3050b341d286101261fec11b2cb358d3994e132344a3ffd96727445879e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quasar-firebase-fornax-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2cbf84fe96d40effc4d6859f430e71ef58609ebb50c5eac96bc704a23190e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ursa-reveal-md-antares-markdownlint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc48de705e14b0fc19c38e6070047b60ded65999d88f313efbde52229f4b8df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in global-algol-adonis-zenobia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3843506cf065364f776d0586ca97866bfb170acea717abb5c1f73d6f78f467f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in antd-async-sagitta-mocha (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b06b3318adfe4495009692d720576dccbd81fb74b2e9c690133f67d70fa5ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in wasat-andromeda-phoebe-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d09196c4b90b3a84cf7add48bfe8e3cb2279e49e087e3e677594151a90cf41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in react-bootstrap-draco-nuxtjs-charon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503cfd33203eb61bea2f55c0cc50a030ca1af9d5506549c886acb9edbd9776af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nuxtjs-prompts-venus-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099ff1eaceb6ff93a26f3e4896f3492526122cbb96d49d532a67135b00209a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...