143474 matches found
Malicious code in mantle-mini-css-extract-plugin-singularitarianism-areology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0ff722dde20bc419da2c0fab62920ba320fada29e63e642f21743e99b42aab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in delphinus-vuepress-antares-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dcf0668bcdb957f83f8e10040b7ab393c0cb92bdc061a5e437566c48e7481c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178902
Malicious code in final-scale-static-yaml-debug npm...
EUVD-2025-179307
Malicious code in development-dependencies-cybernetics-cryptography npm...
EUVD-2025-178711
Malicious code in glaciology-kinetic-paleoclimatology-helmet npm...
Malicious code in forever-iota-callback-vulcan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f60f3a13bf834da1f6e7ea40da360ca3b541224c8dd928490733f69f44b927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gulp-prettier-spinner-parallax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc58ea571f5bd14201e5b992627f478b50a21460535b722143de565ef267bf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178847
Malicious code in fornax-phoebe-jabbah-xo npm...
EUVD-2025-178649
Malicious code in gridsome-andromeda-algol-exoplanetology npm...
EUVD-2025-178322
Malicious code in jabbah-blitz-kardashevscale-markdown npm...
Malicious code in xml-eris-lyra-tectonophysics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f15351ff000357cf55920a6174c8fb220b1b8986f075040a4534a6af1db182d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in unuk-eris-paleontology-spectron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9329444c67fce09de6e11e7173d8332d45be1f00838ad069f07ca80098b44820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in char-alert-abstract-decrypt-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f751a85d1082b7e437e365b50d7e9f5a5e775d31cb2f009ac1857bedf81086b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177357
Malicious code in paleomagnetism-izar-gacrux-kaus npm...
Malicious code in archaeometry-yaml-phoebe-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880fcbbb3bbcce9c482ea58ee1f84a2ff2286445d9705d51ab580632d70a051c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179953
Malicious code in build-hapi-registry-quark npm...
Malicious code in geoarchaeology-sagitta-chalk-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bc927471dab8293245039be0832db1245124759c8766ad7d47fa4e60f26052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in lacerta-ceres-jwt-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9ef158e3d8954448aae52a5a567e27d1ce378b34dfd354ba3f163720c80229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cosmos-yonder-grunt-nashira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ec61cd9ccaae23473fa62ba89bdc0cd77a1cf4c2ad714655057db11196e10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...