2415 matches found
EUVD-2025-177730
Malicious code in mutation-docusaurus-scorpius-centauri npm...
Malicious code in got-loglevel-ceres-acamar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b2e9f729f99ce1db8045e28e7e2b5344d4377dd1b1a8f21d8fe39d2c57b0dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179666
Malicious code in comet-mutation-commitlint-csrf npm...
EUVD-2025-175562
Malicious code in wezen-mutation-ora-grunt npm...
EUVD-2025-177562
Malicious code in node-sass-mutation-cladistics-helios npm...
Malicious code in omega-big-zero-export-java (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6452494d4a91b262c8f8c973f098395e47d3fd525719d07e2c95a4915fae749b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179036
Malicious code in eslint-plugin-mutation-geomorphology-cladistics npm...
Malicious code in meteor-cli-nightwatch-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ae5ae48dc55180eb76cf505e37d133d5e836a3f4246eaf1b4fdf5e063f5a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177732
Malicious code in mutation-augmentedreality-archaeoastronomy-neutronstar npm...
EUVD-2025-178360
Malicious code in io-mutation-eslint-izar npm...
Malicious code in stream-build-ganymede-corvus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24b83fb6af139dbb9bbd46a83057ddae76e5bac4e17b4d50dc4543a894b03951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177033
Malicious code in procyon-cosmos-mutation-pyxis npm...
Malicious code in mutation-docusaurus-scorpius-centauri (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f6271538fff9b9ee158666dd6bcb5e2c1ffc3f2da26a8a7cfa3a22b2286e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in node-sass-mutation-cladistics-helios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6885c91a565b182a01da9b7068f4d8893253dd523b0543c925967026ab95431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in meteor-geochronology-element-ui-polaris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2fbd4a4d8c5dac51c3818c36571c2e2edb4ecd33469ce0e9a4d8cca5ce837d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177729
Malicious code in mutation-dotenv-leda-crust npm...
MAL-2025-189391 Malicious code in scripts-shelljs-quark-gridsome (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c62f3ca6bb9a8405ca6865e83fdd43928f000b1e887a138caaaf6a211618764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in luna-zephyr-hugo-fusion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2659334214262b9e688121710ba3382e3ea0f485ee7251775693554d6ad20f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in optimize-css-assets-webpack-plugin-pm2-lyra-miranda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741161c1e5697b9ea2854e1e99a994a7948792bbba257c3d30130fd110051d4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...