137482 matches found
EUVD-2025-179058
Malicious code in error-bash-monitor-stack-decode npm...
Malicious code in neutronstar-regulus-sqlite-stratosphere (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd76a2dd4b6f1c8374b68d6f578a4c53895f8cdc8fad0504324a71a8377a5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in key-encrypt-bad-class-kernel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f34deec438e96ceca214bae93f61a23a54113b89535960b575acb32a4857fc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177807
Malicious code in miranda-koa-fetch-duplex npm...
Malicious code in xenon-sirius-scripts-regulus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc59bb199e537098aabd62f83528d0fe807818af58acb052a12b5198cddd98f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fast-table-import-async-double (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09b7711575f733c9e98b03e3824ef5b1c29085d432948d8c4df9b454932c4f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in arcturus-nucleosynthesis-commitizen-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c059255ede275e21e5d68337bb9005b3814fb3f5f7d935ee2d55255bd2a1a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178862
Malicious code in fork-object-protected-data-fork npm...
EUVD-2025-180129
Malicious code in baryon-helmet-apollo-meteor npm...
Malicious code in delphinus-vuepress-antares-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcf0668bcdb957f83f8e10040b7ab393c0cb92bdc061a5e437566c48e7481c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pyxis-alphard-event-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 516651765e6ec2134077f6e0128dfeea44e2a4ea76469186f299a7daa07bf2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177663
Malicious code in neptune-grus-fusion-sass-loader npm...
EUVD-2025-177348
Malicious code in paleontology-lyra-hercules-protractor npm...
Malicious code in sagitta-mira-ceres-darkenergy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b76993c5dd8be639afd390d473125aec1b4cb1a0826e660f59f9c189c8e4161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179558
Malicious code in corvus-javascript-charon-semantic-ui npm...
EUVD-2025-179487
Malicious code in cryonics-magellan-bionics-tardigrade npm...
Malicious code in centauri-mesosphere-deneb-solarnebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7fe577b56fcae0f18e8a9da6f6515f83d22eb7cf08237af200ee4ca5977f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mira-pipe-stratigraphy-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a737e899eebfc93719ad05ec9c57d48a39e9ff003452bde12f51658c501679d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...