152 matches found
EUVD-2025-112378
Malicious code in iota-node-config-nconf-zenith npm...
MAL-2025-142101 Malicious code in epimetheus-nashira-node-config-forever (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3680ee4ede4d45b354c8e3ae081df1daf439b7b39c5de63cbecbe66cb1ec1eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140136 Malicious code in browserify-node-config-impulse-scripts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1622a7c3fd318e8af35166278adb720713a472b9b5713ac048a0cfb2fcb2107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111702
Malicious code in link-kinetic-phenomic-node-config npm...
EUVD-2025-124417
Malicious code in node-config-commitlint-element-ui-avior npm...
Malicious code in node-config-gatsby-terser-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514c4395cec647ca12feacfcacdd7e1eb406be1f56351267a9f1f798a8f10ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124404
Malicious code in node-config-pulsar-google-weywot npm...
Malicious code in node-config-ariel-cosmiconfig-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511e6c9da4678fdbcc5910ed10531ec1bf199ca08705ff5cc0ffc8eacc6f05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124418
Malicious code in node-config-ariel-cosmiconfig-grus npm...
EUVD-2025-120629
Malicious code in wasat-rollup-plugin-barnard-node-config npm...
Malicious code in perseus-rollup-plugin-xanthus-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feafaa1939d92d1ca449f23215a2c7eb5567f8c57c4d6ec8bfeed07fc6ad78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124401
Malicious code in node-config-terser-start-morgan npm...
EUVD-2025-124411
Malicious code in node-config-janus-version-sqlite npm...
EUVD-2025-114019
Malicious code in epimetheus-betelgeuse-toml-node-config npm...
MAL-2025-148262 Malicious code in start-avior-node-config-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b94b90f7b87c9bcbf8fa48442a4412439280a7051468f929eb40ad950469d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140644 Malicious code in chalk-jest-nestjs-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab344fb3ee584eae4df856234f3fd3843fd7aa00e09dcf066ce25fce9a0fe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148927 Malicious code in umbra-nodejs-nestjs-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f42250a864c3381b5de4bc77cdc5b6f857514899573093b41f23d83b3c16278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141525 Malicious code in delphinus-node-config-equinox-aquarius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6623f2a96d2cd18057f65d1f01dcc6723a7519e716b23ff5723f92fd99c102b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143507 Malicious code in ignite-callback-node-config-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8894545ee7492ce0676852567fe5d3d6b2139f08799c38602766a6a8f7f91fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...