138453 matches found
MAL-2025-189512 Malicious code in sirius-astroinformatics-ursa-futurology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5945199d76fb43c98512cc0d420376ec81e5fba1228e737d3b251245f1c13f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178985
Malicious code in execute-long-pipe-file-encode npm...
MAL-2025-190394 Malicious code in xml-eris-lyra-tectonophysics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f15351ff000357cf55920a6174c8fb220b1b8986f075040a4534a6af1db182d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in short-easy-epsilon-beta-container (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9aad4a5d3cc9d3b05ef3126a8c7377929098bfa3b444d80823ec298620e501f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188268 Malicious code in nextjs-sagitta-backend-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d30433018a5273b06b2934b8e3c126a9eacec0a1c317401dac6dd8848fadecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187945 Malicious code in materialize-pegasus-typeorm-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4649dbfdc9a442b1e02107e4830d914cd52129b12965f257c943f89497050c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177179
Malicious code in pi-permission-debug-decrypt-slow npm...
MAL-2025-186891 Malicious code in exec-radiometric-aether-juno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fed5f2ccdf20d516c56c1c081e10e61f6712603f06c6c1b66622c510df0f55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in typeorm-xanthus-solis-soap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb5168a960f3e3d393108ebcfe184344358d5a5de8bd0ebd27903e2f4fc0ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189183 Malicious code in report-serialize-rho-public-file (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62de5b36b23d92c1a388e80fe1d3dc55ee676535110f4175eb6a428aea0d3191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187275 Malicious code in hapi-dynamo-archaeoastronomy-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54da22c800be5c89bf0fdeb32b9a7a594ca11b7090f7e046112643b481591db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187836 Malicious code in local-cz-conventional-changelog-cosmos-quark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e458e633b542e7ffd2b0e112aabcc898fbf435cc944028d735d657c238d16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188478 Malicious code in orogeny-fork-query-troposphere (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c492b47b53956d011ee186610884f977d3c12e41fc55e4512fa5e5ac20842815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179348
Malicious code in delta-string-enum-thread-uglify npm...
EUVD-2025-177273
Malicious code in pegasus-xo-charon-karma npm...
EUVD-2025-179598
Malicious code in configstore-hermes-development-update npm...
Malicious code in cat-air-xi-slow-visualize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fefed3200aae9b03b2b7c8bfb5a00098ddc2ba15609c9a4286de08a7b8603e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179846
Malicious code in catch-bash-string-long-catch npm...