235 matches found
EUVD-2025-111421
Malicious code in markdown-pdf-metalsmith-vortex-geckodriver npm...
Malicious code in metalsmith-cluster-epimetheus-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98d400e6ef7fdc5422b770c6416d4ad559acf5cc084450d0220141b598d71d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polaris-cordelia-jekyll-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92770264ec80fb27b4cd47c4c41cf2cc5b9617c694833736cf037433d29e2078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144883 Malicious code in metalsmith-mui-less-loader-docusaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bb6388df2ae8ef88d5d36c437f612beb5e1f332ee1c03c546e1444a4f4f673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140778 Malicious code in chromedriver-metalsmith-toml-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099a4ebf7ac7382de09ed462478b2c913c3b9a9bf86d0bb11b53ad48aa1a13c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148308 Malicious code in stop-winston-bulma-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e6a3b48b1fa6a57f7a149b87c21c622de6c043358cb99a7e0448970c1f9783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146472 Malicious code in prettier-nuxtjs-metalsmith-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc0530eb1ad39700c42120f582e87d6140918e039de76026941107c4042d0a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145949 Malicious code in parcel-auriga-express-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e704fcb48a26e6e92d57e74702f29a59010b27f3610b7b864318db8bc6ccf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144887 Malicious code in metalsmith-polaris-browserify-zenith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efeca10eedd2868420a67a14a83dd8861e9350b5413837f1fac9c3e8496cc52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147165 Malicious code in rehype-css-loader-metalsmith-carina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fe2030d45e843d156fa16ca029b0f063d19d50a9ce988cc4c4a0fe0f2d6ac89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140747 Malicious code in child-process-framework-metalsmith-celeste (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849be0aae93e5cfbd3e6a735ee71094677ea146394d513afeaba71ce013d555d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142642 Malicious code in fornax-octans-grunt-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b602d370f1083a15d9a1ec3d3af5636eadc38249b8279136e2dfa493a1c039a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149795 Malicious code in yaml-meissa-metalsmith-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4813c135c90f9f7d46aa55e10b0dc894ba8db0b83c98c60e70abb69347031ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144877 Malicious code in metalsmith-graphql-pegasus-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17541e872a174d77d0112b013ca7a42e843793669c3082e2c94fd27cdf7dfa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eris-public-metalsmith-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cee348a9b3e9c807a98d182a4eb2314c88e555a006cddbd40e0be915a84a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114801
Malicious code in css-loader-metalsmith-reveal-md-zenobia npm...
EUVD-2025-115329
Malicious code in chromedriver-metalsmith-toml-nightwatch npm...
EUVD-2025-121005
Malicious code in umbra-metalsmith-hermes-perseus npm...
Malicious code in nodejs-metalsmith-kinetic-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878d6af5f0a46610edc9311c111f32eee574f8f65046961c73337c1f01e83e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...