2669 matches found
Malicious code in koa-pipe-dorado-adonis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5757fe0f704af36026b30b821eb55e1852c529acd48a1a22c9417e571e4f8ef1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in websockets-odin-build-pipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e72ddae6120c248ca7b9f4efad1a802437f6e57620450654b98681aca0f57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123751
Malicious code in phoebe-pipe-repository-spectron npm...
EUVD-2025-121074
Malicious code in typeorm-pipe-dynamo-jwt npm...
Malicious code in quark-pipe-mocha-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121843
Malicious code in solis-polaris-playwright-pipe npm...
Malicious code in upgrade-hydra-pipe-sadr (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e18cb32f9743ad0393c9b37380bc6d659a698bcfa50db24fb1611874cfe712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in pipe-dynamo-nodejs-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9dac7feb2c94e2e98f30abb6178870ede5b7ff4102a2d06705e6c6e7f5490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120354
Malicious code in writable-pipe-terser-spinner npm...
EUVD-2025-112927
Malicious code in hapi-iota-pipe-selenium npm...
EUVD-2025-123243
Malicious code in protractor-ceres-pipe-dagda npm...
EUVD-2025-112227
Malicious code in javascript-pipe-docusaurus-nodemon npm...
EUVD-2025-121244
Malicious code in titan-mui-procyon-pipe npm...
EUVD-2025-120431
Malicious code in winston-iota-pipe-chromedriver npm...
EUVD-2025-111374
Malicious code in materialize-express-pipe-rest npm...
EUVD-2025-112897
Malicious code in heka-quito-pipe-eslint-config npm...
EUVD-2025-123933
Malicious code in passport-websockets-apollo-pipe npm...
MAL-2025-146651 Malicious code in promise-subscription-pipe-bellatrix (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44873f9180d44c4ea0b33fc58995dfb2d97754c2f380301d81304b5a95ba58a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...