138453 matches found
EUVD-2025-178147
Malicious code in leda-kaus-bellatrix-leda npm...
MAL-2025-188709 Malicious code in pino-pretty-technosignature-biomimicry-wezen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d78551abc317c974c87d5054e9be17761bb59010ff189eac4ca579d528d32c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179201
Malicious code in eclipse-triton-avior-yonder npm...
MAL-2025-190039 Malicious code in umbra-jekyll-foundation-graphql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c106822cf8e3fa26d502751c57e0f20c137335a06eaa078c6724cb7fa72d9938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188844 Malicious code in procyon-json-dynamo-neutrino (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2e07823e5cce346b257d22926e479c2d0a207460567f6726c84336674fe59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176186
Malicious code in stream-yildun-bootes-neutrino npm...
Malicious code in epimetheus-uninstall-cressida-sedna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbfee41fefce5715d914720f5044a88f951f4b0361bc31c803542153c084c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186175 Malicious code in cloud-user-static-promise-stub (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d787f6189bc96274381f7572cc6423c6e4d61f53808ec5322dafced3748a3f0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ablation-semantic-ui-readable-xerxes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb999c04b781769ca44990d467de461dd690a88b83be66c974ada6a559b8a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176814
Malicious code in radioastronomy-augmentedreality-library-style-loader npm...
EUVD-2025-175444
Malicious code in yildun-cors-convict-ursa npm...
EUVD-2025-176686
Malicious code in request-gemini-prettier-plugin-markdown-hercules npm...
Malicious code in deneb-juno-virtualreality-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ab08056ce07e4b0fa7e42cc1a807d96b6b0be4eece882b85ff70488bfca3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179455
Malicious code in csv-aldebaran-biohacking-cluster npm...
MAL-2025-186677 Malicious code in eclipse-eridanus-upgrade-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9c1477a3588485280f9a465ef1fc8ff66f1091fe204ff4e7c224e91a7c634b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189818 Malicious code in tau-import-float-monitor-finally (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79602db3e66087d3167afedf11b524ceb75c27b2b884c56b824281cc7995847f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in meteor-bulma-augmentedreality-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a98a414d2ee0424f8b9bf8fc79623e0b8b7fa9ff1c5249382548f140103353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in webdriverio-wavefunction-publish-asteroid (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dbd476dbd24f90f40965c0167d1e0e9d30a48c5075ce0ffa548800cfeaf17d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in easy-kernel-deserialize-public-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c7f9693c4ee4fd27e0d30c8a5e7c70561a199ab73f1468b17ef1596d9c03dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...