716 matches found
MAL-2025-187175 Malicious code in global-apollo-dysonswarm-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8624af2234afa89e899457b5b5c227d1c1b09212d1eb8b2a207d466c14a8b2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178491
Malicious code in husky-bulma-nebula-concurrently npm...
EUVD-2025-176884
Malicious code in pyxis-sedna-nebula-sedna npm...
EUVD-2025-176519
Malicious code in sass-loader-lepton-nebula-virgo npm...
EUVD-2025-175460
Malicious code in yakutsk-electron-nebula-jekyll npm...
MAL-2025-187381 Malicious code in html-webpack-plugin-zenobia-nebula-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bda7c207337434698205e1a554e373872174bfe0253efa98b12e47eb140c345e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189589 Malicious code in solis-perseus-bootstrap-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b8d59746c8916f2d0e0aa816776331f332804015a10f708950338801106be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189143 Malicious code in rehype-janus-nebula-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b030dfe78269f05856c1d36dcfb4812704739de10c5ef8312af45bf99110f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nebulanavigator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c20fb790b5f99883b77a0a9600e54a3164b9ab6f4f77bc68efe7a84c48b353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123025
Malicious code in quantum-await-meteor-nebula npm...
EUVD-2025-121690
Malicious code in sqlite-perseus-nebula-prompts npm...
EUVD-2025-116678
Malicious code in antares-nebula-webdriver-mocha-gravity npm...
EUVD-2025-115454
Malicious code in chalk-procyon-nebula-lint npm...
EUVD-2025-121406
Malicious code in terser-ini-sadr-nebula npm...
EUVD-2025-111796
Malicious code in less-loader-cross-env-nebula-ceres npm...
EUVD-2025-116018
Malicious code in bootes-nebula-cordelia-slides npm...
Malicious code in nebula-oauth-resolvers-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbb20f31c5b164bf496adf4620bdcd31e215eb10360856e0636cfdc32a80dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113366
Malicious code in fusion-restart-koa-nebula npm...