5506 matches found
EUVD-2025-112229
Malicious code in javascript-nodejs-lint-staged-build npm...
Malicious code in aurora-tailwindcss-nodejs-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in blitz-nodejs-postcss-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45892fb45c9f93ca8fd5b90a65388042f2205a48413aa509a34733d2c1d972cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in carina-transport-nodejs-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9674ba3bb4b51d8d50b8bcffcf19428bbdce221fc44e026cbf3f7e6947c75775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dagda-nodejs-magellan-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792a64ac652bb6ab18229a861d7f5b30e92db6d2015ab8974b4e844b2e63c799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in equinox-nodejs-csrf-dagda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0975315d4e177db7a394dfd05890d08f20a080994d0091cfe03b455a5044775a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in google-sagitta-nodejs-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338abc925116d84e0ecc7c1b0f9dda422e67c5ad6a11245fb5ce6333b89b3a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hugo-eslint-config-rimraf-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bfccf30b1a5f7c4f96740bbe3fbcbab70e17acf331b86b4d3d94a861e7f4d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hugo-prompts-install-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323f5bb8d985d0dc02ff975746ce4d5f88126d9da820e1d55eb820e3a144653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nodejs-dependencies-unuk-duplex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071fc09dfbb31483cee6efe94d252e17936fa2604f6c450ed55d774c64b7e440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ora-achernar-kinetic-postgres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b3999a1f913ccb9440477973486798c1cb1a637ffaeb420dd26a67dd1f17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quark-pipe-mocha-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sirius-fork-nodejs-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6c1bd831399d8c2b516a325a12d79cba13a091a76042525b7e1c1c6feb29e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tool-sails-nodejs-resolvers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd93e3471899ae35d729a7f8c6bdeca06ee3b377bb9447f02dc441b537fe77a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ursa-juno-nodejs-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd78b3ae86055614a45cad30a7916cb464db48029adf52a52105786f10ee47f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113468
Malicious code in fornax-polaris-nodejs-ignite npm...
EUVD-2025-113393
Malicious code in frontend-wasat-nodejs-nightwatch npm...
EUVD-2025-113319
Malicious code in galaxy-nodejs-ultra-wasat npm...