2404 matches found
EUVD-2025-115885
Malicious code in bulma-mutation-server-ariel npm...
MAL-2025-141773 Malicious code in dotenv-safe-public-puppeteer-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7456e281adc481a1ca201e721d3fe84c7346df5388c89034a25d87af3201aa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140636 Malicious code in chalk-elara-mutation-protractor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1515b30dee8c82bfcebcb435e5df8978d0fc0d4f8bca09af47446eaa856d90dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148462 Malicious code in taurus-castor-alphard-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae94e2a9377380ef9720cb8a9629ded2f7adf3290f1e4f280445c25def67d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146362 Malicious code in polaris-postgres-sirius-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82373122ee604abaee242d6a3b9066cc00cc9cb1d105b6ac45a37f2ef52b6ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139774 Malicious code in avior-loglevel-hercules-mutation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a673a6c10ed1fb774ba0a37635703be63874a22ef2aae819b4fb1d6461e8efbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147438 Malicious code in rigel-polaris-semantic-ui-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f909b3a7f01141b9fbacc667aaf91d800373fbdfde86330fea106757063bae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in uglify-js-quito-ursa-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaadc495679e60a19ec8445196bd4b7acb163dfea8b86c1a624c45ecead0fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bootstrap-ophiuchus-elara-transport (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e4f5d3af59e6bd66aa2444ad893147c22dc875ee1e34d0ee71464198a3010b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bulma-mutation-server-ariel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c9fe09bdabfbe33847cdc28274813f327e3a1bbc8730cd30684270260cedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115582
Malicious code in centauri-configstore-postcss-mutation npm...
EUVD-2025-113478
Malicious code in fornax-markdown-mutation-got npm...
Malicious code in stop-slides-mutation-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf9fc366dd5ff0fe93b35dc17840cbedf1102436fa9b3b5ef24c002963679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eris-auth-fusion-nodemon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c74e6c4177a2be27c16708c819a8e4889de935df4620a23f9b07e19498a0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114868
Malicious code in cressida-repository-mutation-thuban npm...
EUVD-2025-114236
Malicious code in elara-equinox-mutation-hercules npm...
EUVD-2025-124687
Malicious code in mutation-rest-mongoose-castor npm...
EUVD-2025-111383
Malicious code in markdownlint-zephyr-perseus-mutation npm...
Malicious code in mutation-puppeteer-dactyl-morgan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5573cde9eb7f58c50db9c8a3d2f003010d9e86a0331f9e8cc3f75dd851d1b6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...