2374 matches found
Malicious code in socket-sigma-minify-pipe-array (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db413d110af403ea736f9c779fd5677f35ce04384260e6cc655e3585db962105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in grus-pipe-websockets-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e908ab5a9f1588062bc9ccd9e3447dc656308f6a5f76ad9232116d8165cebad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178683
Malicious code in got-install-blackhole-pipe npm...
EUVD-2025-177150
Malicious code in pipe-resolve-signal-uglify-eta npm...
MAL-2025-187245 Malicious code in grus-pipe-websockets-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e908ab5a9f1588062bc9ccd9e3447dc656308f6a5f76ad9232116d8165cebad8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175633
Malicious code in water-omega-compile-pipe-book npm...
EUVD-2025-177155
Malicious code in pipe-grid-byte-old-array npm...
MAL-2025-186117 Malicious code in changelog-tachyon-writable-pipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755ea8d874ed16fc7b55abed10495d56f1fdf7fc063e05f4fdbef8f1a127f829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188455 Malicious code in optimize-pipe-signal-dog-index (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 973ce0a16ad8d5c1f09490cb1dedb8466884a064e94f7f49ef23438767ebc54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176303
Malicious code in socket-sigma-minify-pipe-array npm...
EUVD-2025-179603
Malicious code in config-pipe-promise-start npm...
EUVD-2025-179384
Malicious code in debug-user-pipe-sun-simple npm...
EUVD-2025-177043
Malicious code in process-daemon-pipe-try-bundle npm...
EUVD-2025-179252
Malicious code in double-benchmark-pipe-hash-virtualize npm...
Malicious code in duplex-lacerta-link-pipe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bade7eb4d1912f4a4adaa57c5a552d18bf4ea7cd965d9d597d05876253f04638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175559
Malicious code in whitedwarf-fomalhaut-nodemon-pipe npm...
EUVD-2025-175828
Malicious code in umbriel-leda-pipe-process npm...
EUVD-2025-180439
Malicious code in analyze-boolean-pipe-import-epsilon npm...