138453 matches found
EUVD-2025-177138
Malicious code in planetology-phenomic-accretion-galaxy npm...
Malicious code in version-pyxis-spawn-epimetheus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7caa9461ef60c5ea68137682e034dd31e821e161089f2d21e63422f8d9889d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in subscription-nightmare-nightmare-webdriver-manager (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7cc33633fdcb71ad9cde74bf5f286e45a3fc893122e6cba8a51fd7ffdfec5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187350 Malicious code in hexo-boson-charon-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56cd66ea725cf1761fe3250a133dfda961733f0870f716905609eae11f5f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175547
Malicious code in winston-boson-publish-cluster npm...
MAL-2025-186502 Malicious code in decoherence-fetch-wezen-enif (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b1b0435545152b75f4c01e16249ba939d98661962b8cb6230d3971ee63181e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180077
Malicious code in big-static-delta-private-cache npm...
Malicious code in sirius-darkmatter-lint-staged-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac68762e33089807478b221c74a906d070cef10fe0699ea1243ff9090ef6d249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in metalsmith-antares-barnard-yildun (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450389a4510dcbb902b1868e1dfe320565f58b8703cf3b2c809d5d1dce57c4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180064
Malicious code in bioinformatics-achernar-spawn-ganymede npm...
MAL-2025-185834 Malicious code in biosignature-spawn-slidev-envconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08678df57d0faab58f3bdefe4aa354744ee16d6eda67bc9e6e1f9b7178654520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176350
Malicious code in sirius-stop-umbra-spawn npm...
Malicious code in dendrochronology-biomimicry-supernova-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caed6acc9b9859828265ca4931b9597b3ffd7f0a1466d26e6cc64ed395204b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175867
Malicious code in try-benchmark-assert-module-protected npm...
EUVD-2025-178234
Malicious code in jwt-polaris-accretion-transform npm...
EUVD-2025-177267
Malicious code in permission-resolve-function-fast-try npm...
Malicious code in proxy-interface-visualize-thread-psi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ddea4dbb6eff0705e7dafca9a928b20e3f7c53e53533c9ce697d23afba2267d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185576 Malicious code in assert-analyze-authorize-awk-eta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c630eccb84be45213459c6615f3f2e1a07d5142b357a8e728754031a1209dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189379 Malicious code in scorpius-elara-membrane-brane (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb39ffa44da48ee1378a4026bab1577b895a9547b6f4fd79847539f08e9ed685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...