138453 matches found
Malicious code in epimetheus-uninstall-cressida-sedna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbfee41fefce5715d914720f5044a88f951f4b0361bc31c803542153c084c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186175 Malicious code in cloud-user-static-promise-stub (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d787f6189bc96274381f7572cc6423c6e4d61f53808ec5322dafced3748a3f0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ablation-semantic-ui-readable-xerxes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb999c04b781769ca44990d467de461dd690a88b83be66c974ada6a559b8a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175444
Malicious code in yildun-cors-convict-ursa npm...
EUVD-2025-176686
Malicious code in request-gemini-prettier-plugin-markdown-hercules npm...
Malicious code in deneb-juno-virtualreality-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ab08056ce07e4b0fa7e42cc1a807d96b6b0be4eece882b85ff70488bfca3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179455
Malicious code in csv-aldebaran-biohacking-cluster npm...
MAL-2025-186677 Malicious code in eclipse-eridanus-upgrade-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9c1477a3588485280f9a465ef1fc8ff66f1091fe204ff4e7c224e91a7c634b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189818 Malicious code in tau-import-float-monitor-finally (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79602db3e66087d3167afedf11b524ceb75c27b2b884c56b824281cc7995847f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in meteor-bulma-augmentedreality-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a98a414d2ee0424f8b9bf8fc79623e0b8b7fa9ff1c5249382548f140103353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in webdriverio-wavefunction-publish-asteroid (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dbd476dbd24f90f40965c0167d1e0e9d30a48c5075ce0ffa548800cfeaf17d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in easy-kernel-deserialize-public-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c7f9693c4ee4fd27e0d30c8a5e7c70561a199ab73f1468b17ef1596d9c03dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176271
Malicious code in spectron-commitizen-server-jwt npm...
EUVD-2025-177000
Malicious code in prompts-terser-webpack-plugin-enceladus-graviton npm...
EUVD-2025-177126
Malicious code in plutology-ariel-subscription-meissa npm...
EUVD-2025-179805
Malicious code in chai-got-pino-commitizen npm...
EUVD-2025-178582
Malicious code in heka-antares-vulcan-commitizen npm...
EUVD-2025-176782
Malicious code in readable-commitizen-photon-gatsby npm...