236628 matches found
Malicious code in emulate-private-alpha-decompress-view (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a73cd7def8995cb1c4f464021cd52d52ea06de08bba825ef6747549710d415d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in koa-higgs-jasmine-wezen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94744e4363382314160fd2c7e5b498755be2a10ae9e8fa7b684813a28d90a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in meteor-bulma-augmentedreality-hexo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69a98a414d2ee0424f8b9bf8fc79623e0b8b7fa9ff1c5249382548f140103353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175617
Malicious code in webdriver-manager-cosmos-mongoose-got npm...
EUVD-2025-177766
Malicious code in mongoose-supernova-transhumanism-gulp npm...
Malicious code in omicron-bundle-file-final-warn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6cd56b17c0b82597e1e036cd7fb05112f6c2cf312bf53a0bcad543dfd985bc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178880
Malicious code in float-rain-finally-yaml-air npm...
Malicious code in proxima-dagda-tethys-vuepress (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea648e943b2437d64d35c4b74d17399f38b90f0f2dfd6e329fc14d4bd66bfd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in flare-commitlint-hydra-astro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e15093f898681067658fdbfcee562bc41426c8b5067bf87e0a42fefce8815f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fork-lightyear-commitlint-unuk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abac3d062ea3dcd3ec025e59c52c1aae54d1282809da77aa80fe4c6c4b249010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spectron-neuromorphic-crust-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa98a3d1e0fe9e796ef769e7b0360f419fcdf930fd5fff5885284cbdae3f3824 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180012
Malicious code in book-compile-try-fork-kernel npm...
EUVD-2025-180093
Malicious code in betelgeuse-csrf-aldebaran-json npm...
EUVD-2025-176635
Malicious code in rigel-toml-meteor-version npm...
EUVD-2025-176098
Malicious code in supervisor-adonis-epimetheus-rimraf npm...
Malicious code in commitlint-chalk-neptune-auriga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b475ac7ac71842a68d453cdd91b991e9c197bcdeaa1c1e63eabe9242691e332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176594
Malicious code in root-resolve-wind-stub-interface npm...
Malicious code in delphinus-framework-miranda-chalk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a5b0d8a450baae1d7aebb7e8c503e1c07b94b3b3045f053bec0e0145f5d1165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in filament-axios-node-config-jasmine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01b4ca708c825886f59edaa9b7603233077a52e4be38ca0410b533b306826913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...