137482 matches found
MAL-2025-186523 Malicious code in delphinus-chromedriver-quasar-cordelia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd60d7806f9457c591f355001b125b114764a71b5d93355057a3434d1a91b5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190479 Malicious code in zeta-lambda-abstract-eta-secure (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b820d228c75228585ef00e24bee4183f5a0dff3ec86ddc4b9cc4727395b97ed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186929 Malicious code in express-standard-development-astrometry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b5bc04d8d15258188de8cce44569fa6199329f7f2dea755b111c3ea45a08172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189458 Malicious code in server-astrometry-ceres-aether (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9430520de490e8f75068610ccb80db0faea486d1597a97a99d229f28c8b0d831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190019 Malicious code in typeorm-protractor-cryovolcano-concurrently (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a13bbeca9fad4181dd9e0e667817df4fb2bf290994f3f37757c86d5562cb2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189219 Malicious code in restart-apex-loopback-cors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee23013fa3827d0680b480bf208efea7b8f2b19d350a6479f7efbdf498a4c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185596 Malicious code in astrochemistry-planckscale-levels-singularitarianism (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d09eaada391f12d930144df90244194a3d73586bebf0dca02fb04568762e1e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187462 Malicious code in indus-virgo-publish-taurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5e343e832dcd592b7407aaea23128dadf679e0c78cc297bbd29ff497ab04dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178775
Malicious code in ganymede-palynology-proxima-robotics npm...
EUVD-2025-175710
Malicious code in virtualreality-algol-loglevel-nebula npm...
Malicious code in mui-cluster-antares-nucleosynthesis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a79c5eb88dbf060771545f41472a61811c8817947e70dc0fc5cc821841efb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178875
Malicious code in fomalhaut-restart-loglevel-forever npm...
Malicious code in polaris-parcel-ora-quasar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9a6e796dc58fc1cd8ce228f6a9f7265536d1cd77c4ce0a8d3d2704dc4e4ac18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fornax-phoebe-jabbah-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ab6a4c8a169e333e9defa80910133b4b619a071f3e744ce182a3d24ec5ef6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in stream-andromeda-proxima-loglevel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6323a9610d6fe6ebc8aa514639950069291844d5fbcbb62c5f04ff9cc125f5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177549
Malicious code in nodemon-heka-wezen-meissa npm...
EUVD-2025-180350
Malicious code in archaeometry-rollup-plugin-astro-install npm...
EUVD-2025-176556
Malicious code in sagitta-publish-wasat-fornax npm...