143362 matches found
EUVD-2025-178562
Malicious code in helios-webdriver-mocha-superposition-phylogenetics npm...
EUVD-2025-178815
Malicious code in fusion-postcss-loader-supercluster-biohacking npm...
Malicious code in command-prettier-stylelint-server-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec6af256150fbf835417b18723113d89bd3ad42360b216fcf8333ad5760ffcfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in eta-refactor-execute-float-load (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 125c0784edb26ed9465dc8f0823e5ba03e9837a8cdc6f261ca03fecc79fa65c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in spectron-config-cluster-command (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c08d2d65c76806d436719434d7d31a3a7cc5dff6a3363f1907238d50aa0e630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sudo-emulate-stack-deploy-psi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56ac55148fee2d109b41c3075f3a4e39294e50decd8f2b0fef35db75ce9175b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in throw-omega-catch-hot-sanitize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5660c7de16bc52821723bdfd1087c32d214e18bd66d23f006a40f55180fedacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in commitlint-config-angular-nodejs-carpo-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff6171864c8dd888f734cabf61ae22f26f3868044dd59eb396032310cdbcf72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178993
Malicious code in exec-mira-puppeteer-warp npm...
Malicious code in neptune-middleware-mongoose-neptunology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d0a7212482567b4ff70ad523ee9502116475db634fa180bfd66e4025e91737e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177988
Malicious code in lyra-warp-dactyl-interferometry npm...
Malicious code in module-serialize-fire-bash-mu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a46ef2a5eeea574812f8195f6276a061db7134416045f32a5444ac99d064d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175593
Malicious code in webdriverio-thermosphere-cladistics-multiverse npm...
EUVD-2025-176673
Malicious code in resolvers-semantic-ui-cosmochemistry-andromeda npm...
EUVD-2025-179335
Malicious code in deneb-juno-telesto-shelljs npm...
Malicious code in pino-pretty-kuiperbelt-vulcan-hugo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d01b3bf19da8542bfc975fdfb7a80d55b99366b0702f190de1439f1a90fa5fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178386
Malicious code in install-enif-blitz-supervisor npm...
EUVD-2025-179610
Malicious code in concurrently-ultra-protractor-paleoceanography npm...
Malicious code in vuepress-update-canopus-zooarchaeology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c0ba2e936fb4ba21ad01bbf840125a863fbb501192f3e88e43e962473e8fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...