144810 matches found
MAL-2025-185769 Malicious code in bellatrix-mira-europa-commitlint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cab7ef498b6c313eb54c4a5697005ba951837a2e208cffa2b5687efad2360c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180343
Malicious code in arcturus-magellan-bellatrix-quasarjet npm...
MAL-2025-187271 Malicious code in halley-subduction-zephyr-paleoclimatology (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be6a4751fde16eaa87009873625b6b28179216a0bde52389669c39c7f0ee0d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179471
Malicious code in csrf-mutation-oauth-convict npm...
Malicious code in csv-aldebaran-biohacking-cluster (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4682194840be5b284736379d66a1361e2224ef9402500c3119e5691566cb4041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187975 Malicious code in meissa-polaris-pulsar-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55be14a3895b75568b753b0dbb7e610f2c1ea7657cf1dbb55f0d70db002b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187355 Malicious code in hexo-publish-hexo-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d00717e5974b423da54268e70eeedbebfd4bb4bf7ee91f3dd7e0b29ca6d88211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in draco-convict-carina-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8ac39405d373fe12213e8d3838763c38a7674b0f4ecae50d5bc7ddfdd67f77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176211
Malicious code in static-view-warn-cluster-catch npm...
Malicious code in chakra-ui-test-quark-astrophysics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7da34d62a5c8298da9cb0398d30b6ec22a9f5f88682ffbbef975d1fdeff375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aquarius-slidev-equinox-procyon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0b4b93c5880a11a602e472cc9f2c1f1a2fb41779b5d28d02295ae6d2c12554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in coronalmassejection-express-stream-cryonics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cb7ccafe494f15bf19a6e786f7e944326261f0edda3cdef4b98fbdf9710c04f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in nodejs-sublimation-blueshift-ganymede (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac08682d4cef3bfb91188e87215c4cb83b14be68846287602b4b3a4168441f77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179618
Malicious code in compress-water-cluster-slow-cat npm...
EUVD-2025-177326
Malicious code in parcel-farout-webdriver-manager-sails npm...
EUVD-2025-177800
Malicious code in miranda-perseus-pm2-ophiuchus npm...
EUVD-2025-180178
Malicious code in awk-eta-virtualize-route-route npm...
MAL-2025-187292 Malicious code in hawkingradiation-flare-hydrogeology-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6711499c3b50b9dadad3bd102d577f6ea2d023d26006d020d36b03b830898417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...