2188 matches found
EUVD-2025-179301
Malicious code in development-rollup-pipe-koa npm...
Malicious code in duplex-lacerta-link-pipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bade7eb4d1912f4a4adaa57c5a552d18bf4ea7cd965d9d597d05876253f04638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175828
Malicious code in umbriel-leda-pipe-process npm...
EUVD-2025-176747
Malicious code in registry-pipe-version-chariklo npm...
Malicious code in pipe-auth0-barnard-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b3b68d9a0c694ca31182e0583f4bf4ee987574a2c4a765974633b4f89dc72c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175660
Malicious code in warn-sigma-cat-interpret-pipe npm...
EUVD-2025-178173
Malicious code in kronos-pipe-delphinus-centauri npm...
Malicious code in water-omega-compile-pipe-book (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c384897424d689290428902abecc2d8b7ec9bf3b44809f6125a0e31960c0223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in socket-sigma-minify-pipe-array (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db413d110af403ea736f9c779fd5677f35ce04384260e6cc655e3585db962105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177155
Malicious code in pipe-grid-byte-old-array npm...
EUVD-2025-179942
Malicious code in bundle-static-pipe-mu-float npm...
MAL-2025-188722 Malicious code in pipe-orogeny-await-kaus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2382b0c000b2e4514194f19d8259b7e578360d10c1531f70c0f8429921ac3b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186117 Malicious code in changelog-tachyon-writable-pipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755ea8d874ed16fc7b55abed10495d56f1fdf7fc063e05f4fdbef8f1a127f829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189621 Malicious code in speleology-pipe-pino-puppeteer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc12667834e75d07b49fcd90c909c4159cb87514b0d23ee6ae4ae93afb1756b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188455 Malicious code in optimize-pipe-signal-dog-index (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973ce0a16ad8d5c1f09490cb1dedb8466884a064e94f7f49ef23438767ebc54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187245 Malicious code in grus-pipe-websockets-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e908ab5a9f1588062bc9ccd9e3447dc656308f6a5f76ad9232116d8165cebad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186630 Malicious code in double-benchmark-pipe-hash-virtualize (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3693bc7ca615b1cd5a5525161fc2c67df2038089b984d721e39eaf4b39dc51b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187677 Malicious code in kernel-promise-proxy-xml-pipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbcf722d296a805c892de52ff3cd2ad37ac131c515bfb952e27dae7d017d108d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...