Lucene search
+L

311 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in library-nconf-writable-odin (npm)

Source: amazon-inspector c2b1b50f98a582eed1cf84e12742606a340ad211e26d756da8369fb1313f9b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in less-nconf-global-hapi (npm)

Source: amazon-inspector 97322a9efcadd3ac290dc054fdc79b5dad4c2f616aa62bb535d89bb8525441d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:15 a.m.•5 views

Malicious code in kronos-terser-carpo-nconf (npm)

Source: amazon-inspector 870c1b95dbbb3935fb4d72663c39242940aa9a912600163528e7cb70ebc29a22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•4 views

Malicious code in juno-nconf-odin-xanadu (npm)

Source: amazon-inspector e1eca6f10b55a041a9492c18f053fae16ba7db314667deffa78b1a301e3cbd72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:16 p.m.•3 views

Malicious code in javascript-nconf-ursa-promise (npm)

Source: amazon-inspector ec6c388d4d528181105b95e70ffbfcdb98a70dc29eecadcf4e7ffbd9fc7966bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:16 p.m.•5 views

Malicious code in javascript-readable-fetch-nconf (npm)

Source: amazon-inspector 3827cbbd47b302e1ef59e4c94ec650165f357e5bbd37b488b09940b80b763a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:16 p.m.•5 views

Malicious code in javascript-procyon-nconf-odin (npm)

Source: amazon-inspector ddb8ed7e951c9b0f86612e0b9e2242fcd5a8ecb02d367f9d376cd3d3dfeada6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:14 p.m.•4 views

Malicious code in iota-node-config-nconf-zenith (npm)

Source: amazon-inspector 776028f8550df0eb3f0612e558293396e665b35add8f207b7c3b8636a9fe1b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:13 p.m.•4 views

Malicious code in indus-nconf-jekyll-yonder (npm)

Source: amazon-inspector 11fa6425540ecd5708afa3a9545b094ef19e5c9f10e6bc065e144607a1b562e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•2 views

Malicious code in hexo-changelog-sagitta-nconf (npm)

Source: amazon-inspector 4f4530a5fd230ffc6615d6cacdc70a3aba46b71e960378c617d3a6f453067a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:57 a.m.•3 views

Malicious code in google-mensa-meteor-nconf (npm)

Source: amazon-inspector 9b5f170210e0d8eb08a7942ac60c145b1e1e5c1422ede04ad794da31b30e14df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:57 a.m.•4 views

Malicious code in glaciology-nconf-eslint-plugin-farout (npm)

Source: amazon-inspector 1dd9bb4030c257a4e22a70c445b7bbec7d468e091211d5f691bb80ea288ee8ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:46 a.m.•4 views

Malicious code in express-nconf-husky-mocha (npm)

Source: amazon-inspector aae9edde299403a6442d6af8b3c21528a87a3db62eee3bbaa3bfdcc5d7ec48f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:43 a.m.•6 views

Malicious code in envconfig-nconf-magellan-gemini (npm)

Source: amazon-inspector ea277790b8fe234a34902417fcb515d38b383e722e56e1480996b8af1e9c197d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:42 a.m.•5 views

Malicious code in element-ui-nconf-oauth-webpack (npm)

Source: amazon-inspector c4fb80ab7cb345deae95e9acd799044d7c7a2e26647d6c158c687da329783e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:42 a.m.•5 views

Malicious code in electron-nconf-callisto-flare (npm)

Source: amazon-inspector dc90748ea64a281a778df79da5f5d78d8439ba2ac5dd54761b15734e56d7aac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:42 a.m.•5 views

Malicious code in electron-builder-nconf-warp-fetch (npm)

Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:36 p.m.•4 views

Malicious code in eclipse-aether-metalsmith-nconf (npm)

Source: amazon-inspector bb59dd9e7a3c9ce99968217dabaa8837c397eddb5066f0e0d7db5d2b38e1dfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•5 views

Malicious code in draco-nconf-callisto-cygnus (npm)

The package draco-nconf-callisto-cygnus was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•7 views

Malicious code in draco-optimize-css-assets-webpack-plugin-proxima-nconf (npm)

The package draco-optimize-css-assets-webpack-plugin-proxima-nconf was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder