137480 matches found
Malicious code in eventhoriz-futurology-event-chariklo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c96777a755a8d3822d329b2a9e85b002427023d67467caa7f45bb2d7653b76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179844
Malicious code in catch-daemon-mock-emulate-validate npm...
EUVD-2025-177062
Malicious code in prettier-stylelint-zenobia-loop-paleomagnetism npm...
Malicious code in equinox-xerxes-hapi-gravity (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46251b5589102e711ac28b0d95d435f865b4fb5c4d597fb3d897fffad09a3736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in authorize-float-signal-string-table (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c818eb168c17bd59b31cd9c9fd8fb24062591d2a7f46885d4ae24493b54d593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in release-it-biogeochemistry-geoarchaeology-protractor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5743b02a4835cd12ed5f2fe483d4025048b9db674a57d31bcc2707937ddca19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176610
Malicious code in rocket-vortex-nebula-barnard npm...
Malicious code in pegasus-xo-charon-karma (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181224c30ecd7ac564d8ca1c19e9898a3d4893ef3135055451b9a6683c264f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in assert-zeta-visualize-data-char (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf70c747e8b5236dda3b3cab1f3c6287cc1cca1e6a49f13b239239537aabba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176821
Malicious code in radiant-event-bootstrap-geodynamo npm...
EUVD-2025-175464
Malicious code in xo-quasarjet-publish-npm npm...
Malicious code in loglevel-testcafe-spectron-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18cc09f60af22ff0427f07e1bb85abd4ff926d818b7d8f0fc9656c316e1cb19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in link-upsilon-link-kappa-compress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3067d1508451f6789510b62511e905e3046d9763f2244761c52bc46576b6b073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178633
Malicious code in grus-superposition-pegasus-antd npm...
Malicious code in command-dotenv-safe-oberon-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e05545b4c2052a90e9017e988b2a71db55dbfd8788af2c5cccbf3cc164426f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nconf-middleware-extremophile-cosmicweb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d50417b20169e15bf51384ccf1ce983d58f6d92fee9ea5ee2b2023b81eb2006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cybernetics-duplex-oscillation-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d5b9d148c937598d8f3ef6c189007a02e9549d690b0c4c30e23d467c599073 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180184
Malicious code in await-pm2-quito-meteor npm...