235 matches found
MAL-2025-139519 Malicious code in apollo-library-metalsmith-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecec03d8c8bdb14d98763d0189b3a6b4d5c6faeadadd6bc349d8c5667fb9986c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145107 Malicious code in module-koa-metalsmith-xenon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1bc283f477976680eaac5b0948d6b00ba0ea1609e62c32da3e1d5ed24f1be92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146608 Malicious code in procyon-nodejs-link-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6885027c9d224f1ad6b3459b777b2bc5cea2880932235a3b714080e6f01573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147874 Malicious code in sequelize-neptune-await-metalsmith (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc82087e1ae03780085eb9f9224d3323f0d27a4b7a3782ee393c109ab082532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144876 Malicious code in metalsmith-elektra-fetch-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad4825d26657e1d808e320ba35d6115608876599dc6bf3bba69bae9ba3c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111224
Malicious code in metalsmith-ultra-ceres-fomalhaut npm...
Malicious code in metalsmith-cluster-epimetheus-backend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98d400e6ef7fdc5422b770c6416d4ad559acf5cc084450d0220141b598d71d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116354
Malicious code in auth0-gacrux-gatsby-metalsmith npm...
EUVD-2025-123885
Malicious code in pegasus-impulse-event-metalsmith npm...
EUVD-2025-124899
Malicious code in miranda-ariel-metalsmith-css-loader npm...
EUVD-2025-116892
Malicious code in adonis-bulma-metalsmith-triton npm...
Malicious code in metalsmith-elektra-fetch-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad4825d26657e1d808e320ba35d6115608876599dc6bf3bba69bae9ba3c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120136
Malicious code in yaml-meissa-metalsmith-hermes npm...
EUVD-2025-114265
Malicious code in eclipse-aether-metalsmith-nconf npm...
EUVD-2025-111240
Malicious code in metalsmith-dione-phoebe-ignite npm...
EUVD-2025-113282
Malicious code in gatsby-antares-metalsmith-eris npm...
EUVD-2025-111246
Malicious code in metalsmith-apollo-mongodb-rimraf npm...
EUVD-2025-111237
Malicious code in metalsmith-iota-oberon-schema npm...