138453 matches found
MAL-2025-190242 Malicious code in water-execute-rain-root-cloud (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de575c2b404267b02a2a3ca2c624486aef9c70fac497b83043375c8c4080eac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in release-it-biogeochemistry-geoarchaeology-protractor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5743b02a4835cd12ed5f2fe483d4025048b9db674a57d31bcc2707937ddca19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175746
Malicious code in user-route-fast-easy-sigma npm...
MAL-2025-185748 Malicious code in barnard-octans-development-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b647de4d84c8d74ffa98204aa954f76d7683d1129a058a4e5dfe7bdd5cf622ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in materialize-dotenv-safe-sublimation-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefa120636cfd6f73b190f56220380ce77849e4a839a8559d1106992e1aa7d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aldebaran-regulus-bellatrix-prompts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466d3ed4652474b926cfb44ab27373bbae126cc4d987b1c672274fad890cded6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in remark-ceres-version-chariklo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fb52c758ce5e9d99a04067da85ab9b30625f2bc45fc74782d8190a83db49eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189772 Malicious code in superposition-elara-blazar-webdriverio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25bd7c322c1ffbeada86cd8cb350beab0fea92495645801e8baaf7b2dcf6cdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177520
Malicious code in npm-global-sublimation-augmentedreality npm...
MAL-2025-188234 Malicious code in neptune-webdriver-manager-vuetify-boson (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffdfe1c67faa783eb8752ac15ac0a09ad0d5148686b1b4b60b2f6870e5e27a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178457
Malicious code in ignite-configstore-morgan-kastra npm...
Malicious code in import-float-omega-user-eta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68b9d72ef4a5adf2927a1577844ade2d0903be998fe38061cbfa62e1633027df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176564
Malicious code in sagitta-child-process-subscription-vuetify npm...
EUVD-2025-175480
Malicious code in xml-oberon-axios-neuromorphic npm...
MAL-2025-188217 Malicious code in neptune-framework-cors-ora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3763b4aa9bd783df85d8f4890b25b52808b5ec0cc2cb74e17ff14ffe37444e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180269
Malicious code in async-graviton-webdriverio-quantum npm...
Malicious code in pegasus-nightwatch-andromeda-prettier-stylelint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456007ea7c3c7aa65a04e3206fa87137b64b1fb64e3134e83f1cae387acbc74e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177782
Malicious code in module-fornax-elara-mongodb npm...
MAL-2025-186014 Malicious code in cassini-markdown-pdf-fork-polaris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7856ca00a922b8839ecce049dc630ed44dbd0a8584596ccba77f6f9b3415101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...