138453 matches found
MAL-2025-187570 Malicious code in janus-enceladus-supernova-panspermia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0d9eacb602968519228c53fe632ffea01a20848339c1332b7c1701c9be4f96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188159 Malicious code in mysql-enceladus-cressida-whitedwarf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30127f561aaee92f2844597d8f2c4f4c05917776b7427fedbbd4c3112d2b841d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186283 Malicious code in configstore-eslint-config-celeste-archaeometry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ff2be312dbe53596418e1544834aeb2755f6a4464e54c7b5db9c56439d0aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177549
Malicious code in nodemon-heka-wezen-meissa npm...
Malicious code in paleoecology-webdriver-manager-cli-outercore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1702a5ded5d7db3c4166a15a439a1ab13253c487e4124cb1374ba85b937cfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185472 Malicious code in antares-planckscale-helmet-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f72530dd247b457218e0e4f8916ac3dc415a8a2eab4401eb9bd37f23deb50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in radiant-on-oscillation-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ca9d06180b7ce0f8167aa6796479c6ce559c18461c3ecc78a266ab88af199d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in telesto-nova-zenobia-sublimation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da48811bc870cbdc1b6a57bd71b295cbf3774c4c96f0277cc3c7519f7ba101b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177254
Malicious code in perseus-metalsmith-acamar-iota npm...
Malicious code in spica-html-webpack-plugin-kronos-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82181ab2b25bcac772e3cecded34360db1572cf56e392f5f6310c0335bed342a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175770
Malicious code in ursa-eslint-config-draco-kronos npm...
EUVD-2025-176961
Malicious code in proxima-kronos-charon-membrane npm...
MAL-2025-187778 Malicious code in library-fetch-hyperion-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2c4eff15bede06787b56a8f8b27dea6ef1f37f7ce1a8ee13de06cce88a6df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in subduction-exec-redis-gatsby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50aee37e6d03929cdab61b680843806f2fe81f55e49f41e75b37f927111ca3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190327 Malicious code in wind-sun-stub-function-import (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f4b5d1fd036d698bd418cf176c93868ca1ef60e4582665fcef014f84bccac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176673
Malicious code in resolvers-semantic-ui-cosmochemistry-andromeda npm...
EUVD-2025-175577
Malicious code in weywot-astrobiology-biomimicry-postcss npm...
EUVD-2025-176072
Malicious code in tailwindcss-bunyan-spica-perseus npm...