144809 matches found
MAL-2025-187602 Malicious code in jekyll-less-npm-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbfe23271c900f951f36875d53f77f39ffe4fd6d1d97cb14618347003c907cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in on-xanthus-panspermia-kastra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfaa23e99c9f44a5e3062d69e7746b098ef5f4219ef4ec9a2f8688841a1bdb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189410 Malicious code in sedna-enif-fusion-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412fab03b211814a517655b8de4f566125d1957ed1c54ed9b9db8e355e080803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176164
Malicious code in subduction-phylogenetics-tachyon-tethys npm...
MAL-2025-189687 Malicious code in stream-redis-bellatrix-oscillation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28d234dac2b514572f66ad2ad3ccae3cc70103cf5b2461fedbff81f34bb2353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180023
Malicious code in blitz-materialize-link-lint-staged npm...
EUVD-2025-180151
Malicious code in bad-eta-encrypt-error-signal npm...
MAL-2025-186311 Malicious code in coronalmassejection-asthenosphere-astrobiology-cassini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cb81f3d331d2861ecc6df39b2c8a84b53696cd5c489d6e3157782d4426db0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188394 Malicious code in octans-yakutsk-dotenv-leda (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d751656f2ac7efe86e47c25583f93d9ae1536daffdceaf849d3483681ba1dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178517
Malicious code in holography-commitizen-kardashevscale-morgan npm...
EUVD-2025-177689
Malicious code in nconf-superagent-public-writable npm...
EUVD-2025-178258
Malicious code in json-docusaurus-terser-aurora npm...
EUVD-2025-176148
Malicious code in subscription-resonance-singularitarianism-procyon npm...
Malicious code in kronos-buffer-titan-zephyr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792938793257953f6b2ebb196fc67715e7747e88d7f1d9dd52ccf05b0acb5b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175519
Malicious code in xanthus-got-telesto-accretion npm...
Malicious code in browserify-astrometry-stratigraphy-foundation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245bdbb5c5bf35b2ed8cce928d9902f8c580a23fb021cbe85fddc30550eb7c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in wezen-hexo-update-lithosphere (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b835942f6a8543c810550c04c687136135ae9e3c47b61eb95bd234b7c13caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in superflare-on-nestjs-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bc374df6bcd185907d9484f3b7435d95ad6326a7b1eba24209d2443c9e3479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...