143358 matches found
EUVD-2025-178349
Malicious code in iota-bash-bundle-delta-encrypt npm...
Malicious code in metabolomics-cross-env-antares-run-script (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416c9d07d4bfcbc0f380096b82f6ae758880a86c41a1d9264e1b732e0772a9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179035
Malicious code in eslint-plugin-ophiuchus-pino-chromedriver npm...
EUVD-2025-176457
Malicious code in sedna-rigel-package-xenos npm...
Malicious code in cassini-halley-jekyll-less (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd52a72d246c6814a27d6224892b221e16e0799cabb54223fb2bf8d9bc57b74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in integer-web-key-resolve-mu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94aad90f40c30ad2202a9b22aa2607757388041740bb1902fc51611a74dbef91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cache-mensa-leda-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56788cff5b913c5a179cd511025821a24df1bc1ca382527d1e91bf6fd180e3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in quito-fornax-dynamo-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e424c895ae2c5174fb36eb355139f09e3b04dedf5ca047eeea84746b5602e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176699
Malicious code in remark-halley-terser-sagitta npm...
EUVD-2025-175588
Malicious code in webpack-dotenv-safe-avior-nodejs npm...
Malicious code in dione-dorado-apollo-mongodb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dcbc7931eef29ac5c5af7ba06802424115895cf2f3b63f7ae23d400ffbdde7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nextjs-octans-interferometry-fusion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ffbcf6edd07fde0a671041eb74ddf8d1620fe1cb6147cbee37b45eba572519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in odin-baryon-primatology-equinox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2818dc552c9cfc1b8556ecb96bea85e101159cbac44081b894801c548d0ed4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175862
Malicious code in try-stub-yaml-query-awk npm...
EUVD-2025-178132
Malicious code in less-cluster-soap-firebase npm...
EUVD-2025-177753
Malicious code in morgan-sass-loader-release-it-quark npm...
Malicious code in upsilon-parse-module-virtualize-sandbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37a440b3c8b3c00cc296b78fcc754858117fc974f54cf17d0173de5b6c412031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in phoebe-taurus-xerxes-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ce33902acb11575c7df090bd0de3e13592b69b1c04fc0393bb8dc491e30e1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...