2581 matches found
MAL-2025-161287 Malicious code in nabila-poke84 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f41288741b796dd8505ebbb21f7f5e095f0476b5ab46da091f95a7647cda3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-161337 Malicious code in nabuf-ogof-dofsi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e2ba2a1fd73194744a8396ed66afcb58a0bf9ad8ead3042b514518cad6ebde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-151680 Malicious code in abyila-nibi-luyipai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610db148982b6e91344488cfa451513e2cad72b9b22d7d30c6c91b9aeb9bd21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-153559 Malicious code in avomainah-frasu-oufu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86df6a5266501a6c663e302aa7c57fcf6e6058fc59bb25c13515996f6421e46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cz-conventional-changelog-phenomic-uninstall-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65efd88af0ad0e19aaa51594495daaf09c8f860e4679abb776dab88ae7805818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111557
Malicious code in loopback-mutation-sagitta-titan npm...
EUVD-2025-114291
Malicious code in duplex-procyon-polaris-mutation npm...
EUVD-2025-113844
Malicious code in europa-enif-frontend-mutation npm...
EUVD-2025-120447
Malicious code in winston-cassini-mutation-orbit npm...
Malicious code in element-ui-proxima-sync-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d1516a39fae6f5fa9467f1039259512b48cab124ba4540daba287523350a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nebula-bootes-dependencies-kaus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47714b8324929c7ccc1c8f04907ac525d8457224ff36b522c46d41fee2d5849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122718
Malicious code in relay-mocha-mutation-rate-limiter npm...
EUVD-2025-122322
Malicious code in sagitta-io-mutation-process npm...
EUVD-2025-124209
Malicious code in nuxtjs-redis-fork-mutation npm...
EUVD-2025-111166
Malicious code in middleware-blitz-mutation-transform npm...
Malicious code in atlas-terser-webpack-plugin-auth-rocket (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4489eef115661ed272d059faf900d257bc44ad702df52cb77224721e10282c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121519
Malicious code in supervisor-upgrade-optimize-css-assets-webpack-plugin-mutation npm...
Malicious code in dependencies-wasat-eslint-testcafe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156cd86e2d601b460757239dcc8be2e53759330ea90b0ff0ebce92acaa767702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in chai-cordelia-quito-playwright (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8f3e8c12a5e507af7ff89897aca212fa0d62f72bbefe7c7107241f0d4f3606f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...