1773 matches found
MAL-2025-74949 Malicious code in putra-ragi56-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94eb1aa1bfb87d16f68d57392105d6ded0062895ecd51a897b21746ffb8407c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-76517 Malicious code in zain-martabak53-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed090d3b11ab0a8fea033555ed34fa2e09ac596946d2540f4e5721df8e65ce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-73327 Malicious code in hanafi-kentang7-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c924dfe3c1cf4534b4ff9d7606c2aeb24ed226b98600b5e9ee58ae57c067c909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-73945 Malicious code in kurnia-empal89-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a989dd12bc93a076ccb6233ae0c6472bf6fecb9712f93fa94d64852e60353c00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-72256 Malicious code in candra-miemee98-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d328e8c7392aade54a44c5d66a0daffa2079cd961a0c84921010ee10008adbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in violent-tomato-nightingale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cf7af52b83ed1bcae37d7e545132d9579f732ec12f0676a0fcb55a46b2c4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in medieval-moccasin-manatee (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0514163e90cbf962ea78b0d785549a792d381912b7765ce0b6fe924344acf980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vicious-rose-jellyfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d96aa4b5764f23942786ca66c4e6babd19d1c6b83712901481c1f1d9fd56e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52590
Malicious code in prominent-white-mastodon npm...
EUVD-2025-55793
Malicious code in asleep-amber-fowl npm...
Malicious code in honest-peach-ant (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977e421d47b8cff70a4a4fec963912123fe31a3330c0ad6390270865cfa2bf10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fragile-bronze-guanaco (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefb58c3e80a26666679d6185704ce2125ea199ad4d24a56a4a6aef870c4f127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in social-amaranth-swordfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f293b6cb9099665d8d33a13b6bfdb0c3a27efb19d02434a46a9bc60c3685d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52067
Malicious code in sharp-sapphire-hyena npm...
Malicious code in due-violet-ant (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6036b7c4a7100f5255f3c56ce93ee564b5d619e50020bbffa83e4b7ddca1f92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in strong-yellow-bobolink (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f82edad58dc5ec590499f6e6f99a2c635b05861a0b154ea4beaf5f923fdb0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51457
Malicious code in tropical-amaranth-cheetah npm...
Malicious code in @bipyruss/astralamber (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a24ee1ea21c3b924aadf0e2d1a87b23d890ac8f4d81f7ad047c8dc8e8f37557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...