Lucene search
K

5 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 4:29 a.m.3 views

Malicious code in command-xo-ariel-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a366c080a4eaa2648f83bcb94435f3176e85614a052f24641242493394fa733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSV
OSV
added 2025/11/11 8:11 p.m.1 views

MAL-2025-121336 Malicious code in kurnia-sroto16-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b31f1a7aa50864af392c1d8512e069ef4cf4c7eaacafb22a9d830928b345331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
OSV
OSV
added 2025/11/11 3:19 p.m.1 views

MAL-2025-118531 Malicious code in zul-tapai86-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71719681f5c417dfbe8ac5680cc8bcde59a8313dfe6fd981d654c27204c79107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/11 7:31 a.m.2 views

Malicious code in digital_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d881cae06b9be274e9b2756057eae9efa28756e9a80bcc7c76602cbf50154828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
Exploits0
OSV
OSV
added 2025/11/11 7:31 a.m.1 views

MAL-2025-109022 Malicious code in splendid_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1905d0b2e83e6853527477bd779f3289d08bf0aecdd8835c1e7a176c9970f111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
Exploits0
Rows per page
Query Builder