143426 matches found
EUVD-2025-175499
Malicious code in xenos-chai-changelog-helmet npm...
Malicious code in hugo-capella-janus-nucleosynthesis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c833040778b208833172be98968dc0d98c708a39a399c3fdd27d8c86303fb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cypress-phoenix-higgs-chromedriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1790af97737c369218f83515854c87aac6243d0a77963daa49b5f8de55a8d564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178565
Malicious code in helios-fusion-rollup-command npm...
EUVD-2025-175960
Malicious code in theta-daemon-moon-char-info npm...
Malicious code in ursa-hawkingradiation-pulsar-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44783e0629c201822fb799a347c530d77eda8b2138bb131f0087271ddeb17fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cold-phi-cloud-cluster-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f0e9984087d6fc6265ee22bf94590da86323c7d97b5205d237579d0a5556bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in socket-uglify-notify-assert-encrypt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b79e32644b78e05c920de11e095dba2ea5f33e39ee8abd5838124522edd0c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in double-file-encode-moon-virtualize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f10f8c7b46a34fb8cd76f802a955287a6e735d17496a721553248f24725219d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in subduction-exec-redis-gatsby (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50aee37e6d03929cdab61b680843806f2fe81f55e49f41e75b37f927111ca3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sails-link-update-glaciology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c565b4c6d9dd5485fafd3fce71a661cbee1ead7dd64f7bb8d20006fbbcbc76e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in decrypt-import-info-optimize-authorize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59d67888e31511b979568f205c52f652170fa14821b80328addca5fbf3deb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ini-mongodb-got-socketio (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038ac6a29d5943f57bfec8a485c48e4adc402bddaa61931f49f1e469f7ef312c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176383
Malicious code in sigma-web-unix-interpret-earth npm...
Malicious code in sigma-awk-abstract-error-kappa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d501bf3234ac1bd75171ea127e1a4bda1473613eb110a0228aa8c4a668c5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177000
Malicious code in prompts-terser-webpack-plugin-enceladus-graviton npm...
EUVD-2025-176292
Malicious code in solarnebula-betelgeuse-mui-apollo npm...
EUVD-2025-179186
Malicious code in elara-magnetar-asteroid-cosmicray npm...
Malicious code in relay-halley-ophiuchus-public (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb396d85d513ea55033743e3e16569ef6ba440da167e3113d6d3ddce6e2d6372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...