Lucene search
+L

607 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•7 views

Malicious code in lint-staged-carpo-webdriver-mocha-start (npm)

Source: amazon-inspector 6b8e050df62b8e9d79261093ea9636c346dfafd383a4b7cf736e5cdd571aac4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•4 views

Malicious code in library-biosignature-bionics-mocha (npm)

Source: amazon-inspector c195849028cdb53692f81b71f60bedc1c41ab1cbecd2d1f708262bccd1f04c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•4 views

Malicious code in levels-canopus-webdriver-mocha-spectron (npm)

Source: amazon-inspector bddb6f11dd61b299f12d5dc5c0f67274a2e4750a1798259d163f335b3fb0d698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•5 views

Malicious code in less-mocha-slides-umbriel (npm)

Source: amazon-inspector eb08e378fd5b37897cb55692109f14c77a0d01eb08201a44b838e117a48f037c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•3 views

Malicious code in lacerta-rest-mocha-foundation (npm)

Source: amazon-inspector 9cd2cea9b29f12c8809dbad7c7cc15741dc113c1461e85f0325ef348e76f7845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:15 a.m.•4 views

Malicious code in kinetic-mocha-markdownlint-avior (npm)

Source: amazon-inspector 9c2b8b3cd3c7b00eae9c1f8ce3ab2c5018b3bfc08a10b12045b903c81d64c2ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•4 views

Malicious code in kastra-scorpius-mocha-fetch (npm)

Source: amazon-inspector 7f7d64236b575351a9446cd6e18afbbbce19a2a32b2eb67ae0e1e1799e035f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•4 views

Malicious code in kastra-oberon-spectroscopy-mocha (npm)

Source: amazon-inspector b2e7279e1ca549eb0a3e63cb167e9feb16a51f1dedbbf158bf38ddbc2b169e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•4 views

Malicious code in karma-cross-env-mocha-grus (npm)

Source: amazon-inspector dc707037d54ddbddf16b2cf0245a7546cb636b2bd26cc4ef826e23f5433923df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•4 views

Malicious code in jwt-webdriver-mocha-regulus-umbra (npm)

Source: amazon-inspector 6a0de7e41eb30e311f5f5074ec43a5a2bc6fb5dc2a54dbdb9d9f3f46f928b047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•4 views

Malicious code in juno-eslint-plugin-webdriver-mocha-start (npm)

Source: amazon-inspector 8918b440c334ac959b4a14cb31973b6672f8c32b5b293ca8a93e02c1f0d77725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•4 views

Malicious code in juno-areology-dorado-webdriver-mocha (npm)

Source: amazon-inspector 0c5dc9081536cb40daf4c65e7faf0f892689726670e29ce501cc77d9bfb21158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•3 views

Malicious code in juno-antares-flare-mocha (npm)

Source: amazon-inspector d5bdc635e072a475177d4dadf2c9890985c9678f720a2ef69952a4feb3c3dc28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:13 a.m.•4 views

Malicious code in joviology-mocha-cluster-redshift (npm)

Source: amazon-inspector 8e9dd0d817cec48ab80cd4d1714aadf14d4ff65a48878f2666584abdcefedaf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:13 a.m.•2 views

Malicious code in jovian-mocha-postgres-typeorm (npm)

Source: amazon-inspector 933b00c6a74f6d2bd88e6379856703cfbbd465278b276af4693ce443f13ac429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:13 a.m.•3 views

Malicious code in jovian-mocha-ignite-zephyr (npm)

Source: amazon-inspector 6831fd7e73db6ab318dda20722139bff9649596d92e387563b666f0778dce4ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:13 a.m.•4 views

Malicious code in jovian-postgres-webdriver-mocha-await (npm)

Source: amazon-inspector 4ecf3fd1d508e4debb89f36a79eb6c7ac29572b4b9404eb582a72f90583c8daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:16 p.m.•4 views

Malicious code in jest-mocha-parcel-hyperion (npm)

The package jest-mocha-parcel-hyperion was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:15 p.m.•4 views

Malicious code in janus-callisto-colors-mocha (npm)

Source: amazon-inspector 7fbebae1be459a44b6204915a1718da722ca6919bddd78b6ec4410cd9fb6cdb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:15 p.m.•4 views

Malicious code in jabbah-deimos-fornax-webdriver-mocha (npm)

Source: amazon-inspector 91a60f7cc7b169f8e1232d7a749adc3157ac3942569c9f447ff02e1dc726b000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder