138453 matches found
EUVD-2025-176262
Malicious code in spectron-ursa-yonder-command npm...
MAL-2025-188035 Malicious code in middleware-antares-bootstrap-fork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8413a05fb60698d2bc5a2570951f668c8b724e92016b863ae04b7b1ee7906617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190385 Malicious code in xerxes-koa-promise-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7f2f61998e11d01a86b314c656f657f5b480c9796ae6910da2c471584dfafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190105 Malicious code in ursa-eslint-config-draco-kronos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e217945f165a1f3c90399d422a9537e095a863757767e01869c147571bd5687e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190015 Malicious code in typeorm-indus-restart-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59684f7e8948ef45ee9558fdd7a6b3e81cde5aac0835af604702b99536f71930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185866 Malicious code in blueshift-publish-carina-nconf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c549f3f83be3a9352be7a86dc574afb8bf0d430bc7e01a82a70d38bfcde7f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178891
Malicious code in firebase-indus-biogeochemistry-superagent npm...
EUVD-2025-176596
Malicious code in root-fire-user-hash-static npm...
MAL-2025-190363 Malicious code in xenobiology-electron-deneb-rimraf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95d8ef715a3d090ebad1f5c4179df9c012946cf224baf6da20e70544e333058f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179811
Malicious code in ceres-morgan-stream-singularitarianism npm...
Malicious code in meteor-paleoecology-mysql-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4496238327c201e2b75a77378a59756e8b115ae18a4d8560bcb5bd70e5f421c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in geoarchaeology-sagitta-chalk-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bc927471dab8293245039be0832db1245124759c8766ad7d47fa4e60f26052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177798
Malicious code in miranda-spica-sails-superposition npm...
Malicious code in awk-node-public-interpret-cron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e72184d33130eb0661746bef8ae65da6a9d81b8319bca387ad8374ec909da7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177143
Malicious code in planckscale-webpack-json-neptunology npm...
MAL-2025-189310 Malicious code in sagitta-antares-winston-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ddd0b309f243a59e5c481a498f75eb1c403e12809499a7c5b5fee2a091da4f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187904 Malicious code in magellan-hyperion-gridsome-electron-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a5df34c1f19de7677a58006bccb59e510052f7e8102d6f117af9856b778f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189242 Malicious code in rimraf-centauri-loop-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bd387d55005c58c55352182c18c3112abc00546ff906373d546d58e4201bc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...