138453 matches found
MAL-2025-186896 Malicious code in execute-java-short-cluster-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0078f37af1918262289019391ff05bf9d93d02c69489efe7d3c4cd18bc998f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187115 Malicious code in ganymede-volcanology-meteor-andromeda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 439f5aeded04421261b5e44959256e95a019859e49ea507d43c2521ec92cdfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186919 Malicious code in exosphere-troposphere-grus-cluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a938b8d5f2c06771aa4f407892665e96dfd1f65f2a61835af1bc190e090aac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187261 Malicious code in hadron-vuetify-astrophysics-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a023aa918b6df89cf02b3fb9cbff1e261dbb97330b127160a907246a48e94bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189386 Malicious code in scripts-geckodriver-jwt-draco (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd17df12578fee8db8e79d891c6bd598247c1228ad1b274e4584993fc2927c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186649 Malicious code in duplex-request-astrometry-titan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2651fe16dc29246ea136b5abe4b863a53fc8361641f4db128a6e69e0911519d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190327 Malicious code in wind-sun-stub-function-import (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f4b5d1fd036d698bd418cf176c93868ca1ef60e4582665fcef014f84bccac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180396
Malicious code in apex-postgres-procyon-zenobia npm...
EUVD-2025-179756
Malicious code in chariklo-babel-postgres-thuban npm...
Malicious code in mechatronics-xenos-fomalhaut-antimatter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecfc4d442ea48f03d59f82d8103e499b19aba52c3c0d7bff202c16e10d0043a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179093
Malicious code in epsilon-catch-cold-beta-new npm...
EUVD-2025-179443
Malicious code in cybernetics-selenology-local-eridanus npm...
EUVD-2025-179035
Malicious code in eslint-plugin-ophiuchus-pino-chromedriver npm...
Malicious code in electron-superflare-quantumfoam-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c7efe4a221072863a6817bd5ec47504ebd2412d7bf3a9901ecfca0fd8f7cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176260
Malicious code in spectron-webdriver-commitlint-apollo-mysql npm...
EUVD-2025-178265
Malicious code in joviology-heka-accretion-speleology npm...
MAL-2025-187454 Malicious code in index-short-java-phi-virtualize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e263ba680a09fbfa7fa23f8bee80092a3b81959c15f1cd633d5a32f174fd41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175609
Malicious code in webdriver-manager-venus-coronalmassejection-spica npm...
MAL-2025-190157 Malicious code in virgo-css-loader-whitedwarf-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e72821469ad969c599578140f8b08a5c150f3d3e646c199d211f9e05b669ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...