2418 matches found
EUVD-2025-121371
Malicious code in terser-webpack-plugin-mutation-mutation-unuk npm...
EUVD-2025-122114
Malicious code in selenium-pm2-titan-mutation npm...
EUVD-2025-123520
Malicious code in postcss-loader-mutation-command-procyon npm...
EUVD-2025-120169
Malicious code in yakutsk-chai-css-minimizer-webpack-plugin-mutation npm...
Malicious code in gravity-centauri-helios-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdfd1d46cfb1e79a472555538c03f5c65bfa51c324508eef833111f42ef5c741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mutation-gacrux-axios-gravity (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2cb2e0a07e4cb03c277e22d854f9cbc3681de5b051d9d9a3b838494c646a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in request-proxima-nashira-link (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104278030a72c3633913dafea9d2872511fc08ef9999259ee4c8eadd3040cf9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in avior-neptune-io-redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159acacb064f7f4b882ac1b31bf36ebd3aeb9ab58dd49a8c614929e0aaedb33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in webdriver-manager-fusion-mongodb-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c18743cfd4ff6c9eedea2a8176bfbb837d77317f5737a3996133ffe258edf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quantum-cressida-registry-chakra-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 848323cdde2a4eaa6bed6671fbcbafbe9d1ebd010579191a4b1a43554dd28054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116349
Malicious code in auth0-mutation-websockets-ophiuchus npm...
Malicious code in protractor-ceres-pipe-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1f5d475d87b9be1e9b5b9319d5a267f7c1d579104ea2bbd5c75147f6239988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in auriga-eleventy-venus-neptune (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2496a63bee7beb3167c28e31284ebf45ceda5dc2fe54d573431cd05f1daf2bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grus-canopus-mutation-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5664bfa8cb0f8ea74e02667e677c54ce8adf8252363128555627600e9c6f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in scripts-eridanus-duplex-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc40e9b3651a910d7a97424e0a6b2f9dfb784f58b1ac169adad47c54b88f1e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115582
Malicious code in centauri-configstore-postcss-mutation npm...
Malicious code in avior-loglevel-hercules-mutation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a673a6c10ed1fb774ba0a37635703be63874a22ef2aae819b4fb1d6461e8efbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in carina-postcss-auriga-less (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f7eb49ca9a8f5960086bc7093a2e8660219468302235c18df46dce850a980e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mutation-chromedriver-postcss-loader-proxima (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67015401d420f0d76976cc33d6c4b78a0808d48575356ada771e44ec5c50d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...