138453 matches found
MAL-2025-189139 Malicious code in regulus-taurus-reveal-md-exoplanet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4d093eb8a9178b681e21780f061a46062c3fe3e20f452dcbf345f4b16a799c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188980 Malicious code in puppeteer-geckodriver-redshift-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13eee7e60a6dfa0e4c6b1091d856e3478c1e254bac890f6a2f95ebf2ccb71ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176315
Malicious code in soap-weywot-robotics-on npm...
MAL-2025-189964 Malicious code in transform-ethology-weywot-style-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6827172d705088dbbceab6e5d571e982778c40522594d4b1769be2151dd4821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186937 Malicious code in farout-convict-meteor-accretion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6fe15b6892ffa91a78075c352e61ed517909a82abb91bdc8793edcb285eb581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178650
Malicious code in grid-mu-cloud-signal-cat npm...
MAL-2025-185656 Malicious code in aurora-sync-buffer-canopus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b4ed240221e294fa55d34536228a20e0a7f3ca8a80a0e59f3caa86531c263d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188873 Malicious code in prompts-radiometric-passport-geoarchaeology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0758b16dca5d6cced10fe96195a7c2306a87710fa84a7e5173a33d16b608468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175764
Malicious code in ursa-mui-rest-xerxes npm...
EUVD-2025-177991
Malicious code in lyra-janus-spectron-rigel npm...
Malicious code in blazar-draco-mesosphere-mineralogy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a01697c106728258ab384897041a77198e1d8de26e461f241a9937d74f833c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188876 Malicious code in prompts-xanthus-blitz-eslint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5254336ae396f90fdca8d9a98e3c45ded6be01d1e812733bf65f8d8a93c58b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176962
Malicious code in proxima-hugo-pm2-phoebe npm...
MAL-2025-188872 Malicious code in prompts-meissa-lacerta-deneb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c10fd22419fb3d6e178c081f9d5255950af4238612ae142fa4a8d8b98ccd3ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178984
Malicious code in exobiology-adonis-paleoceanography-biotechnology npm...
MAL-2025-188914 Malicious code in proxima-kronos-charon-membrane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b83b5da130d0cc0ec2d6729beb3684e2dd6f215845318a3c6ce2d10550e0ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176720
Malicious code in relay-halley-ophiuchus-public npm...
MAL-2025-186720 Malicious code in emulate-catch-file-mu-parse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780b4f9548afe60317b667414bbc56a8f0601ac37ed12885df88706ecec718ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...