144806 matches found
Malicious code in nu-interpret-container-grep-bad (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09fcf0f0b56c9bcce303f3f0b00cd434d5f276b06967ac7541976361325bfcd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in draco-hermes-betelgeuse-auth0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e3e9fa277eb2731d2e5d6b112e3c7dc4fcd0328ded4825757ce1929bf1fad88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in electron-builder-kaus-non-blocking-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc97f9ddff3d836878325e761ded0213655d4240acbfa676ac68ebd722f29c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in primatology-technosignature-magnetosphere-parcel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb9ab28fb0d25c1d31157674fadc3130df8137ade8adb06630447d3c3639e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177426
Malicious code in optimize-proxy-alpha-cache-decompress npm...
EUVD-2025-177179
Malicious code in pi-permission-debug-decrypt-slow npm...
Malicious code in markdown-relay-optimize-css-assets-webpack-plugin-neutrino (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814d9c5cb9e62fb3014607e0cc8e6b132834d0f216d57d6a055d9aba26c110d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in callback-fomalhaut-slidev-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6530e7d524ba18030b212aec51ecb2bc02efc16da675b6d3b84232396518dcf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177790
Malicious code in mock-parse-earth-export-hot npm...
EUVD-2025-178306
Malicious code in janus-neptune-spectron-publish npm...
Malicious code in nebula-deneb-winston-apex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0735a38c36f2def41b0e0f45a429e1d63bd1f07e44636f8161b6c11d78985b89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178233
Malicious code in jwt-rest-jest-pm2 npm...
EUVD-2025-177674
Malicious code in nebula-outercore-promise-lightyear npm...
Malicious code in tectonic-seismology-upgrade-commitizen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74c0bde7c9a540a8b87c023497dbc6b0bccb2ab6e10d52e75d86d40907243a55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177679
Malicious code in nebula-fomalhaut-auriga-superagent npm...
Malicious code in slides-callisto-algol-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b3bfe695362ca840a8b1d470ae420b7edfcf507830c21db35bdac8e60ba2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177343
Malicious code in paleontology-tailwindcss-tethys-jekyll npm...
Malicious code in octans-sedna-entanglement-xerxes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8de26676b02acc15c835b2db1cbc166b1c3da77c3fe9955268f44283710cc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...