143350 matches found
Malicious code in umbriel-spica-rate-limiter-auriga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24a2c3e8a9bab387f482012d72bbd73ca8104bd9ac31e0303a0cd6bd10374ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hyperion-capella-auth0-planetology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73e61530abddf10af54e4b3e7e468fb6e763ffe1f4059aec6a0de811685b393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in multiverse-perseus-ignite-ceres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e2dc25fda56b320b22f7aaa8af3bf5680fb5d97128cb6cfe22f2435a8dfc067 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in middleware-mini-css-extract-plugin-ignite-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3e82122591102f60da59a1022fd9f2b71682cbab9b037920a755ef505cc80d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176485
Malicious code in scripts-private-frontend-fornax npm...
Malicious code in koa-higgs-jasmine-wezen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94744e4363382314160fd2c7e5b498755be2a10ae9e8fa7b684813a28d90a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179983
Malicious code in boson-apex-parcel-cybernetics npm...
Malicious code in nashira-winston-aurora-gatsby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af5c52e6cf6987260607279112d0d054adf72f69bd5cad9cc62fec8cf109c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e2cf5e995e7be6217368c91ec8ecf853022838cc7a763cbcc73d49e0c23b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fermiparadox-redshift-rollup-plugin-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfbf33468d1a669d9d3768f32cc08b7d8834db618abdd21c594206c8359a7542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177050
Malicious code in private-dorado-grunt-jupiter npm...
EUVD-2025-177734
Malicious code in multiverse-perseus-ignite-ceres npm...
Malicious code in chariklo-perseus-chalk-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5338c7a76846e68332ded14ff77f20bddae227a163e5be26d6aa6cf4ef5eb266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180090
Malicious code in betelgeuse-frontend-titan-yildun npm...
EUVD-2025-176533
Malicious code in sandbox-quick-hash-psi-throw npm...
EUVD-2025-178933
Malicious code in fermion-geochronology-quito-janus npm...
EUVD-2025-178801
Malicious code in gacrux-dorado-impulse-test npm...
Malicious code in prettier-stylelint-got-cosmos-ariel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191ad1021c21de2e4d2aff52918a87b8c01692e87e5d7d02fa1dd71a2f77ed88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...