137750 matches found
MAL-2025-187664 Malicious code in kardashevscale-dotenv-safe-callisto-quasarjet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00dd6daf056c12587f78cd4d25b3ea2e9fdc19b90912211f667dda8a247dbd73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187350 Malicious code in hexo-boson-charon-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56cd66ea725cf1761fe3250a133dfda961733f0870f716905609eae11f5f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189762 Malicious code in supernova-cosmogenic-buffer-bioinformatics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ade48535ff4a6ae12b960998a8941ef26736e6e67fdc6d33d49b63d1d21298a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179472
Malicious code in csrf-farout-backend-fomalhaut npm...
EUVD-2025-180141
Malicious code in bad-xml-simple-yaml-reject npm...
Malicious code in bad-old-deserialize-bundle-boolean (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cdce2dcf4be67b168c96fb9a58af64b1b400ef7ee5345b993348f76fcefd3c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spectron-webdriver-async-primatology-canopus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4810ee66c68692cb4e0793f469d0d3874bbb2255c23b0dd696e904d2e43f0c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176010
Malicious code in terser-isostasy-build-avior npm...
Malicious code in schema-wasat-development-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5f6eaa3bd982241d93e268623b9e2a3f9a157067253101f30b132eb97f64f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in export-bad-compress-fork-compress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2450caad5f166bccaedd001fd246098f519b199e4d01210149d86eda62fed676 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in paleoceanography-shelljs-umbriel-galaxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2386202e5955957868e619896d6eb531b3f4a1f167c4964e7c4ce5d273871974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179958
Malicious code in build-commitlint-config-angular-lithosphere-string npm...
EUVD-2025-177930
Malicious code in mdx-development-elara-stratosphere npm...
Malicious code in slidev-parallax-epimetheus-redis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9648e5930b748de1f16364db1c8526b6da10543ce9ccd1179eef4cf83479a823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jest-astro-despina-aurora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569fa8ef9fdbddd1906550949c47b3b5176f9b5c58439068442b4ef54ed34221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176113
Malicious code in supernova-cosmogenic-buffer-bioinformatics npm...
EUVD-2025-177048
Malicious code in private-enum-compress-upsilon-omega npm...
EUVD-2025-175439
Malicious code in yonder-less-loader-ini-auth npm...