5506 matches found
MAL-2025-145567 Malicious code in nodejs-hydra-jest-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9932132f6d9bafb954b656330727089d6eb11d9a744fe3333e8dd7384105b5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141247 Malicious code in cressida-vuepress-nconf-xml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3fad2a7701e8e70e72d43cee4ad37b3a44e2bbbc521f2696eaf92805c68b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120062
Malicious code in zenobia-nodejs-sass-loader-phoenix npm...
EUVD-2025-124359
Malicious code in nodejs-elektra-perseus-apollo npm...
Malicious code in redis-europa-nodejs-rate-limiter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e6c8ec825ff834f3e5e8833c43a6562685e59b8c189ec4687da1cad6bfd3a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123785
Malicious code in phenomic-json-nodejs-configstore npm...
EUVD-2025-124035
Malicious code in ora-jekyll-nodejs-antd npm...
Malicious code in upgrade-selenium-nodejs-lyra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c05fac68d2ae84d2d004354b5f094461e364e0f684064354fb8cd27ba37ae1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121885
Malicious code in soap-winston-antares-nodejs npm...
EUVD-2025-120278
Malicious code in xenon-nodejs-tethys-husky npm...
EUVD-2025-124356
Malicious code in nodejs-frontend-sync-command npm...
MAL-2025-146533 Malicious code in private-halley-nodejs-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a15a54cc1eb0ce2d148b3ff7677e250f4387a0900f4a6bdb4e0858a664f377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120073
Malicious code in zenith-polaris-warp-nodejs npm...
MAL-2025-145572 Malicious code in nodejs-mongoose-dotenv-mongoose (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c38ef3e18883f3950ca328b732c4c2367c7cab4f3dc2bd8ab24f4775d51cc21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140052 Malicious code in blitz-nodejs-postcss-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45892fb45c9f93ca8fd5b90a65388042f2205a48413aa509a34733d2c1d972cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142969 Malicious code in google-sagitta-nodejs-nightwatch (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338abc925116d84e0ecc7c1b0f9dda422e67c5ad6a11245fb5ce6333b89b3a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145560 Malicious code in nodejs-cygnus-sync-markdown-pdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83ce14a4ddd7e7d11d764543dc23faf3d5934fb6001941a7c607b55b5975b389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144282 Malicious code in leda-nodejs-nextjs-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8488e7f3eb1b0a423523519eca85887ecd6c04e408dbec4c05e2e936659200fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pm2-xerxes-luna-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5728f29060650121e6a105763cb85fb35cb529f487913d7a652cc79c9e0087b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...