143451 matches found
MAL-2025-185376 Malicious code in acamar-xenon-eslint-magellan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66894e71892101c8dd7c29f71d32f135677cd05c77630b1a91fdc89c9a2f1d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185967 Malicious code in cache-phi-public-info-sed (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0666a30a9d5cca0651eed7ac628009b339a858e95f59355d7862e59a46c62cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186684 Malicious code in eigenstate-auriga-module-chromedriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939bce452be9f38f47bf7adba1f04636244fa890ff50cdd36a91f3c3e80598d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186003 Malicious code in carina-solis-ultra-rimraf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd53fa33a8f12455a525df8cb7c7ad2cdcc564bbfe5f34a826d792195879d9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185895 Malicious code in borealis-hercules-ora-lyra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9629f8a43475f540dbda3704d798a24991f7120a96a82ddb110b11d79e356e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189037 Malicious code in quasarjet-prettier-plugin-markdown-supervisor-astrometry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 576926635b169080c570659fe0393f4270f071642bc3a6d93c45167be7d1e955 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187374 Malicious code in html-webpack-plugin-hologram-stream-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f786614246d2d9d6432c8d36c1015a7c75b9a2b3c99baa78f244a48ad6eb9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189024 Malicious code in quark-photon-eris-speleology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bc318af39702e1bd1c0c1bfdd4e4af1ab27c81c777b6853f7a5acfffbb10e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189283 Malicious code in root-user-await-validate-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eadca940140bd92565e3b06a732c77498e9eb34e843f9bf2a52c4c46a9edac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176569
Malicious code in sadr-nodemon-cosmology-server npm...
MAL-2025-190286 Malicious code in webdriverio-wavefunction-publish-asteroid (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dbd476dbd24f90f40965c0167d1e0e9d30a48c5075ce0ffa548800cfeaf17d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189757 Malicious code in superflare-tectonophysics-less-deimos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1b8da8dc9f41bfa1ba5e27052994c79ef7554a21aa878b14d2a0e3e5b19562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185656 Malicious code in aurora-sync-buffer-canopus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b4ed240221e294fa55d34536228a20e0a7f3ca8a80a0e59f3caa86531c263d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190224 Malicious code in warp-luminescence-ionosphere-baryon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe3519e4943693b644adcf2e72e87adc10ffc1fd7dd2e5f5d4e6fc3a26c8145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in supervisor-cosmology-element-ui-rigel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28afc8ae3541e417d775a5aab2fce980182eef544c720dae8a7ae1c4453d5437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189856 Malicious code in telesto-publish-oberon-charon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de6837a499af3bd764db78016d59ed3b3b1fe3f57a03f81847910a466b622002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186096 Malicious code in chalk-interferometry-telesto-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a02471fea4f80ed0b903454c83af16d69d52baacd41a34b3477026c957a429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176145
Malicious code in sudo-yaml-virtualize-encode-pi npm...
MAL-2025-188487 Malicious code in outercore-cli-concurrently-troposphere (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76cbf6f2fe58669afa1ad61f6a6f611e0b68ff421df8477ef30eff21fd33ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...