138453 matches found
Malicious code in oortcloud-css-minimizer-webpack-plugin-config-cryovolcano (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f7585eeec78d135fc3f19ee9979e64089eeaea12fcd8b0be0c70ead619b829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175670
Malicious code in vulcan-nestjs-pm2-biohacking npm...
Malicious code in load-float-omega-char-mock (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17628a270991d0081404bd4691644acbb3f67c10136dbda8720e9bb83da80434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hexo-restart-farout-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5247e16048caf71cba989ce7d7576f498fa66a44e6060ab73d416196f8e68e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176764
Malicious code in redis-parsec-fomalhaut-nebula npm...
Malicious code in module-serialize-fire-bash-mu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a46ef2a5eeea574812f8195f6276a061db7134416045f32a5444ac99d064d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176959
Malicious code in proxima-nightmare-postgres-seismology npm...
Malicious code in visualize-cache-web-float-slow (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f7f24dadcead52f45d3b13c1e58579d94e0015bb0a26dfefe06ac153a45caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175985
Malicious code in test-sudo-notify-meta-orchestrate npm...
Malicious code in bad-old-deserialize-bundle-boolean (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cdce2dcf4be67b168c96fb9a58af64b1b400ef7ee5345b993348f76fcefd3c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180519
Malicious code in abstract-wind-sed-void-chi npm...
Malicious code in exec-mira-puppeteer-warp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de5d3575e186cbf2ae9d26ac63915739b790bf0fb98bb1ae5db1afc0e3336da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180492
Malicious code in aether-radiometric-sedna-phoebe npm...
Malicious code in eslint-plugin-commitlint-config-angular-terser-commitlint-config-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844532ffb61dedf116bb671dd0cb7a8e6ee68b4d6e7b7a3137265a273e7fca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in visualize-validate-array-hot-analyze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5405559277835b28bc4c8bb6db51998aa22c4fd91d1ef31c819a28799cc347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177685
Malicious code in nebula-build-auth0-mui npm...
Malicious code in mutation-exec-arcturus-gulp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 482caf12c32414f2e9b669998df2ea4c0f636c61aa2294ed275285eea1b96a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in comet-mutation-commitlint-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd2a460ca0073a03ed3c72112f9aa3039146098c9d9b9c319caad2451f7ab58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in astrophysics-extremophile-library-bulma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf10cbf40031ebfaa532db3444c9428c5e03586a9488e2adf2fbc812a3d7f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...