236 matches found
EUVD-2025-124811
Malicious code in module-koa-metalsmith-xenon npm...
MAL-2025-142445 Malicious code in fetch-hexo-commitlint-config-angular-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1275904ccd7fcedcc0f0e16254ee142d90c79cc0ba947d02fe8bfe251f8ffa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142642 Malicious code in fornax-octans-grunt-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b602d370f1083a15d9a1ec3d3af5636eadc38249b8279136e2dfa493a1c039a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142707 Malicious code in frontend-magellan-metalsmith-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfaded5a35d94f132a6c8896414ddf1d3d52e9a23f4b571443e2689ecd34e447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144472 Malicious code in lint-staged-xerxes-repository-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9139a900e53769bc31e4a3c68db8adba88b9271bf86ea79fda3761e3b0954062 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144877 Malicious code in metalsmith-graphql-pegasus-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17541e872a174d77d0112b013ca7a42e843793669c3082e2c94fd27cdf7dfa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146928 Malicious code in quark-metalsmith-cypress-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bfcb7cc1eb411b112fa6af69eaab7717479dc39cd47dbe110c5e2a84aa634c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142032 Malicious code in enceladus-pm2-metalsmith-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd6535d0df808138b8c1274dc7cc91e10777d5e12474f13dd805e3e6828a0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148308 Malicious code in stop-winston-bulma-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e6a3b48b1fa6a57f7a149b87c21c622de6c043358cb99a7e0448970c1f9783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147354 Malicious code in rest-metalsmith-phoebe-pm2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8177a5231f64f91ad462497824a507ac608aa02801a73de1d55a927c0e339d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145949 Malicious code in parcel-auriga-express-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e704fcb48a26e6e92d57e74702f29a59010b27f3610b7b864318db8bc6ccf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145107 Malicious code in module-koa-metalsmith-xenon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1bc283f477976680eaac5b0948d6b00ba0ea1609e62c32da3e1d5ed24f1be92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142830 Malicious code in gatsby-antares-metalsmith-eris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0608261a0fe9f89fd63b28a2f5ae4ea7d0bda75b02105c40feee677bf54f4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124117
Malicious code in odin-venus-enif-metalsmith npm...
Malicious code in quark-metalsmith-cypress-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18bfcb7cc1eb411b112fa6af69eaab7717479dc39cd47dbe110c5e2a84aa634c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124769
Malicious code in mongoose-colors-private-metalsmith npm...
EUVD-2025-123450
Malicious code in prettier-nuxtjs-metalsmith-miranda npm...
EUVD-2025-113920
Malicious code in eslint-config-apollo-uglify-js-metalsmith npm...