138453 matches found
EUVD-2025-177022
Malicious code in promise-aurora-kastra-backend npm...
Malicious code in cz-conventional-changelog-heliophysics-carpo-mocha (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b43b39469f3044ffca305f0206cc9adcde03611a0fd8cf39b08d0230171522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175456
Malicious code in yakutsk-server-hydrogeology-saturnology npm...
EUVD-2025-176432
Malicious code in sequelize-eris-europa-sails npm...
EUVD-2025-176804
Malicious code in radiometric-nova-rocket-transport npm...
Malicious code in earth-small-scale-simulate-static (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fb4a6ae7bf4b0905de3d73d4d9b8c46faf60e8c2e993b8f02590be8e6893e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176329
Malicious code in small-bundle-function-minify-query npm...
EUVD-2025-176514
Malicious code in saturnology-enceladus-jest-xml npm...
Malicious code in cat-compile-analyze-deploy-cloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9514ab2e174c3c41eef9112756070b30355f2acf2e0db624c254b0fbd779b0d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pipe-wavefunction-test-redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f380280d6a4001277413145152d77591136530660904e107761654fa22ec727e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in soap-slidev-carpo-restart (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae0139684ff37091484c18ca8bc5d4cf9f1515aa5a2f6022fb21a338af537e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in radiometric-vega-element-ui-oortcloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1260fed5837dd3c43bd4ecea72add038d82fbcf75ec543f03ca004f630806fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in metabolomics-cross-env-antares-run-script (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416c9d07d4bfcbc0f380096b82f6ae758880a86c41a1d9264e1b732e0772a9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in passport-pino-library-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7dfd1dca0c0311db7a37091bd349a0f55ebe17608d41fa2a8f2117a71407312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in bunyan-spectron-webdriver-less-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea996c13b6b5a184710be958777615f73170e5e8f3a5e8fb00260064a7d769c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178386
Malicious code in install-enif-blitz-supervisor npm...
EUVD-2025-180208
Malicious code in authorize-interface-psi-orchestrate-visualize npm...
Malicious code in forever-iota-callback-vulcan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f60f3a13bf834da1f6e7ea40da360ca3b541224c8dd928490733f69f44b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...