44068 matches found
Malicious code in cod_red-66 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc801c1064935fdcdf38e8f67f798039c6e3505e5447bc493bf0876f5867f078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ade-nasiuduk54-pore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51baaacf3e8d597340051d15aae859f6a2537de5cba361038f8a98165de678bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eko-menjes91-tititugel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4389b60aab4714c4c1407d4ee99484f73c6f4c5200d7c96b51747ab0a9fe75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sari-lengko42-pore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0839e126506cf56b3708369cd12266ab248949da34912890dcd4c1363a39089e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
dhrav1 (1.1.2), irma-dodol78-riris (3.3.4) +2 more potentially affected by unknown CVE via dhrafortea (>=1.1.2, <=4.1.4)
dhrafortea NPM version =1.1.2, =4.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dhrafortea and may be impacted: - dhrav1 1.1.2 - irma-dodol78-riris 3.3.4 - joko-tek48-riris 4.3.2 - kurnia-sambel16-riris 2.3.1 Source cves: unknown CVE Source...
MAL-2025-98479 Malicious code in verbal_yellow_wildcat-32-tisubasah (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c37954c845b2128189409c5d3c1338500f8a61d5a78e86ee64b5266d9a67fa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-98518 Malicious code in xaver-bubur82-tititugel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c48a47e0af24b5f388e9dcc108d94f4b072bda0d47ca66957d59ab60c3d854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in troubled_seahorse_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c10c4290384696c5778d93e83efb71313dbb9fdb751f3d212ec2eb8829d109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tense_bass_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e284542b917fc226a35075fc3fe1808c07d0638161b1cf5e9c0c2fe544f103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-63293
Malicious code in linearocelotz3n npm...
Malicious code in slow_hippopotamus_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aaab0353a991b511fbbccba02672cedb4a75697566298a9248f626cf42a884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in roasted_basilisk_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6989af0d9fa3d95bf68de217d2305f10906c63771f043e2033f8384ee03e216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in back_xerinae_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7572c4df0849ff724fd575e25f6962759865b2f81c9d2421d5e975703b581b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-73705
Malicious code in silentantelopez3n npm...
Malicious code in defensive_otter_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc034d664a622e250eac8dd26710f79a10eb4dbc00069b9105cc98fb6a650675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in chief_bobcat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc366f01b826f29ab6c212e70f0ae3aed75d7494efbbf41622d445a3f950d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in wily_parrotfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e479b61c4723a6b8823efe0ae424e170297971f3f663ef620589c5c1e01f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in intermediate_moth_requirement (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3589d46b6ee967a1eacf73fb6b11ece62f43f33a755a5088dd1ff08148d8c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in everyday_puffin_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc57c8b919a4adafcd6e7341d0c5507463d0306c452bca29c0c2e41f9c4f2bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...