138453 matches found
MAL-2025-187624 Malicious code in json-docusaurus-terser-aurora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2a92e7f61c80858f54bd20a3fd7e937f27f7d9ed09ec3e392e39a2ab47a204e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187046 Malicious code in framework-release-it-fornax-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b7d00319abd576e303397fbe78c43c769e871f30b6725bd501a0203e38c58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in exoplanet-genomics-thermosphere-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3eb6aa62f0ef2efdeb2e5a6edc6dd0fc792ad8dd18cec6011451d9b9b53b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178974
Malicious code in exoplanet-xerxes-interstellarmedium-octans npm...
Malicious code in backend-crust-cordelia-markdown-pdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9abfdf4b11861c28b5f846e1b02a001c90a9a855d5563ce213d97013e6a36817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179935
Malicious code in bunyan-pegasus-primatology-quantum-computing npm...
Malicious code in resolvers-foundation-library-kastra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05e9755af5296428d20e2af407f0a2bbeeb2519e0199e94b2aca7fc6210c71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179405
Malicious code in dagda-tectonophysics-materialize-astrometry npm...
EUVD-2025-179310
Malicious code in development-antares-xerxes-membrane npm...
EUVD-2025-178527
Malicious code in hexo-publish-hexo-xo npm...
EUVD-2025-177597
Malicious code in nightwatch-global-subduction-eslint-plugin npm...
Malicious code in rate-limiter-areology-dorado-apex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531a5a33c302063443322b56d40422675ab57fff80775b6ee7e266f4bb0b7165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178358
Malicious code in io-publish-antd-outercore npm...
EUVD-2025-175965
Malicious code in thermochronology-metabolomics-semantic-ui-aquarius npm...
MAL-2025-187664 Malicious code in kardashevscale-dotenv-safe-callisto-quasarjet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00dd6daf056c12587f78cd4d25b3ea2e9fdc19b90912211f667dda8a247dbd73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in levels-eris-ora-hydra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396eb7d9acfb07e0b4d45bf71b3a83fb17f984b821fe561d455530ef55d0f946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190271 Malicious code in webdriver-mocha-electron-cache-dione (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60a8ea6352feda352b3af9ef5245e88e08670f5c2f15646528a2b2895c7f2f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179058
Malicious code in error-bash-monitor-stack-decode npm...
Malicious code in zenobia-rate-limiter-cosmos-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63628192eabab4fceeb1ac6d15980c58c5e6ed660a4f133745da0209a59ffda5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...