260 matches found
MAL-2025-188600 Malicious code in pegasus-nightwatch-nconf-selenium (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e249e84533ba3f5ff5d0be0c07b16886f7c224e9148d494ab0f395877026b2ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185512 Malicious code in aquarius-babel-nconf-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367d06fdbae8de2b7d6bcc68f6b13999fc7160d92484baa01898cb3fd84acfab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113146
Malicious code in google-mensa-meteor-nconf npm...
Malicious code in nconf-thuban-centaurus-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deee308073cd092d17a74292e5cebc2292e92286732c43f143f213de23e65479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124388
Malicious code in node-sass-csv-nconf-algol npm...
EUVD-2025-124619
Malicious code in nconf-airbnb-draco-magellan npm...
EUVD-2025-112224
Malicious code in javascript-readable-fetch-nconf npm...
EUVD-2025-124335
Malicious code in nodemon-nconf-sadr-vuepress npm...
EUVD-2025-111392
Malicious code in markdownlint-lacerta-solis-nconf npm...
EUVD-2025-111539
Malicious code in luna-pegasus-nconf-zephyr npm...
EUVD-2025-115046
Malicious code in configstore-rollup-nconf-altair npm...
EUVD-2025-113637
Malicious code in figures-nconf-celeste-triton npm...
EUVD-2025-124602
Malicious code in nconf-firebase-async-mongodb npm...
EUVD-2025-124611
Malicious code in nconf-commitlint-kastra-xanthus npm...
Malicious code in nconf-readable-wasat-ariel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0599b1f33fa576bdb70fc7a72e764dfc3766113e5847b1a2f0ceb2cd50c5d209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nconf-eslint-plugin-postgres-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27040d3214079953d8c3c96719261f6c8568a04a0970d14d7e3b6677afbb30f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123939
Malicious code in passport-io-gatsby-nconf npm...
EUVD-2025-124592
Malicious code in nconf-query-browserify-protractor npm...