143359 matches found
MAL-2025-186546 Malicious code in deneb-iota-xenos-celeste (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5941dde5e83d9b49e44d62dcbb8338de71a05426727f9aa5813f9c325464ff78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186687 Malicious code in eigenstate-gravitationalwave-config-ora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ac45b72547ad9810a75d1263cb7b9a765a2eb4ffc477983e5b99f4890b2e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185784 Malicious code in beta-orchestrate-slow-void-table (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b227205aa0a92d0a25b8f20a2541e47d8cbbac034ff4a92b57769c69b8e6f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188425 Malicious code in on-eigenstate-eslint-plugin-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61020121bb5fefbd87e738daaa5fa258f3218c907118b301862e4333a537ef1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186694 Malicious code in elara-hexo-postgres-astrochemistry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4068ecfde3f050b2eb3b2da7f67d43a1e892a4a4b0f4124c4635ec96c99f44ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189174 Malicious code in remark-exosphere-cosmicsilence-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e957895b962f8adc6e7b566c2611a524875a29b93490125c8e08a0c643b3e0e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189863 Malicious code in terraforming-nebula-cordelia-virtualreality (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c189c82723ce5a436c8482e4184626a3def10827f7f0f3bd4cb2a84f806b4040 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189901 Malicious code in testcafe-scripts-phoebe-nconf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07e68c5cc63ecf1236bea18be4d8e0efb1e70538e8a54dd9d2010f86fbea1840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179327
Malicious code in dependencies-galaxy-install-module npm...
MAL-2025-187069 Malicious code in fusion-publish-query-auth0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d512720b57f461578a656406e73eed2aa998862e62e2635a60b469de603a5928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185870 Malicious code in book-compile-try-fork-kernel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a01f18be29f47da8cd809438024dbf979163557d280bbba71baa379a1becc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188686 Malicious code in photon-airbnb-virgo-websockets (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57c86807e608c5b48c721b687275aad0c86c57fac80d36be0425e26e2fd6085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187942 Malicious code in materialize-dotenv-safe-sublimation-meteor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefa120636cfd6f73b190f56220380ce77849e4a839a8559d1106992e1aa7d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188560 Malicious code in parcel-panspermia-commitlint-config-angular-tectonophysics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7ce5ec778c0d8a09caa214fc9ed62c9222306281fcc29ee88e7c4f779e7806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186514 Malicious code in deimos-concurrently-outercore-browserify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffa621761675fd2e3ec7b468f01d71eee4ac950beb2e51f7e89d5533a0a6b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189290 Malicious code in run-script-juno-supernova-commitlint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5416570aa5bf98628db20b38d6aa688ee1a11743013f75bbbf34b033fb219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186094 Malicious code in chalk-asteroid-await-prettier-stylelint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0124325d816f4773fcfae9158e4307c2ea0ff90e2182a36e609ecad7bd1f43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190097 Malicious code in upsilon-socket-cluster-static-eta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c4127e8b9df2359bf4f313e20808bc22f8a6248af19bb410a6350869034d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sirius-lynx-antares-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1b1189742e5aae02454df7ad46c469deecbe1d18ea01b1feb3d6b00b7c548d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...