144830 matches found
Malicious code in eslint-plugin-commitlint-config-angular-terser-commitlint-config-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844532ffb61dedf116bb671dd0cb7a8e6ee68b4d6e7b7a3137265a273e7fca38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in visualize-validate-array-hot-analyze (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa5405559277835b28bc4c8bb6db51998aa22c4fd91d1ef31c819a28799cc347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177685
Malicious code in nebula-build-auth0-mui npm...
EUVD-2025-179480
Malicious code in cryptography-biohacking-xml-graphql npm...
Malicious code in umbriel-spica-rate-limiter-auriga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24a2c3e8a9bab387f482012d72bbd73ca8104bd9ac31e0303a0cd6bd10374ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mutation-exec-arcturus-gulp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 482caf12c32414f2e9b669998df2ea4c0f636c61aa2294ed275285eea1b96a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178145
Malicious code in leda-morgan-xanthus-ophiuchus npm...
EUVD-2025-180096
Malicious code in betelgeuse-antd-magellan-xanthus npm...
EUVD-2025-176999
Malicious code in prompts-xanthus-blitz-eslint npm...
EUVD-2025-175903
Malicious code in transhumanism-blueshift-thuban-geckodriver npm...
EUVD-2025-179651
Malicious code in command-dotenv-betelgeuse-neutronstar npm...
Malicious code in hash-socket-slow-debug-interpret (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb938e088242a057f495dc0624b819b9294c2ad57b502008354dd8cad5c61db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177829
Malicious code in minify-mu-catch-authenticate-user npm...
Malicious code in terser-webpack-plugin-mechatronics-rest-neptunology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d591555d92c42e4a868143c59d833b18854369f7c4865e3cce2a3fcf9bdfc6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in comet-mutation-commitlint-csrf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd2a460ca0073a03ed3c72112f9aa3039146098c9d9b9c319caad2451f7ab58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in superflare-xenon-semantic-ui-fermiparadox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1b127a0c5be33114bd053dab9bfea5df7dd8aad9047519b597c810ef4599a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hapi-prosthetics-thermochronology-galaxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3945b57156407a7defb56a483e3d506c0a307663ac840d78caefe669db00c55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175499
Malicious code in xenos-chai-changelog-helmet npm...