138453 matches found
Malicious code in zephyr-hyperion-cypress-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c3120a7bcc6b643e7ee8de6d0ac0d7396a197a63da497db369d04c59ebc39c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178116
Malicious code in levels-eris-ora-hydra npm...
EUVD-2025-177403
Malicious code in orogeny-karma-babel-sequelize npm...
Malicious code in darkenergy-google-paleoanthropology-thuban (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7840b2d8bc4ea830f6ac0902efab2ed67a3181461cec1cc74a07a7c515f105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jabbah-areology-archaeometry-vega (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1450f46fd9e16986c07c3d8779c3e55418dc857de0953803ae76fac04be89af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jovian-postgres-webdriver-mocha-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecf3fd1d508e4debb89f36a79eb6c7ac29572b4b9404eb582a72f90583c8daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in star-permission-parse-assert-small (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8fb324b2acae3a24eb32deb53820b89c37d9ead245b8e2cfde66d4842fadb29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179627
Malicious code in commitlint-publish-fornax-prettier-stylelint npm...
Malicious code in exoplanetology-grus-mdx-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ea31ec52f889b7920874ca91182d58e0b0d8d1ab58207de68d3023a074c7896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in export-bad-compress-fork-compress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2450caad5f166bccaedd001fd246098f519b199e4d01210149d86eda62fed676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fusion-astrometry-speleology-sedimentology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ba45c83eaab790eee19ca8938e29d07510392bc54957785d99bdb4e92b84e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179549
Malicious code in cosmicray-andromeda-registry-npm npm...
EUVD-2025-176374
Malicious code in simple-load-info-error-cold npm...
Malicious code in react-bootstrap-phoenix-janus-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bfaac5b13ee3615038f009dd8cc5708e1733b833f6322bcab514c56246a82d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179319
Malicious code in deserialize-double-simulate-interpret-tau npm...
EUVD-2025-176216
Malicious code in start-iota-webpack-cli npm...
Malicious code in tectonophysics-paleoanthropology-pegasus-astrophysics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ceffeea78e713fda29ff11bd8a85a44edec98204994151a3e0232ca19dae572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in remark-loglevel-process-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b2cdb762f4052d4146c3d2d35d10fe3fe6516343cf764c76cc9a051dfc4474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...