844 matches found
Malicious code in polymer-afifa-ga (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34ca35839a262070cce164420919ea7fa06920470be7ce72cf4833d6d2724483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-177603 Malicious code in polymer-afaf-radaodd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c24a6e88220bdd71b0f6825e9e1cfbc3cb66ef330214fc8112000cc77ba696 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-138489
Malicious code in polymer-aghashgiha-agahai npm...
EUVD-2025-137644
Malicious code in polymer-gisgsgghab-agagada npm...
EUVD-2025-138247
Malicious code in polymer-datdsadsid-raadar npm...
EUVD-2025-138462
Malicious code in polymer-agiha-atfsfyag npm...
EUVD-2025-138417
Malicious code in polymer-avgof-agiffadfo npm...
EUVD-2025-138211
Malicious code in polymer-fadsid-doraema npm...
EUVD-2025-138572
Malicious code in polymer-afajif-roiaad npm...
Malicious code in polymer-intsi-adf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6f6803fe6fb84ac1a8eeb84ad8e9aa2d96406644709facfb7bbf0446bfeb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-ini-adf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832c1c99d14408568497be44cbfefe7c07de60e230a23fea28185bc516ca3e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-minats-burn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8539fcf80f11151725a45262add6ea7baf81491a4c3e75eaf032b854261f8203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-164453 Malicious code in polymer-intfsi-adf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ddacfa304dbe818fce49e39f43e5c449960ce72d871f585a36b1dfe7ab3796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-intfsi-adufi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5341d2665d9c77c7b18755236900f1d82a12533cdcd2b6d3c9081567be4c87a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-inti-adf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cadb5cd720701e98705f1db09ac67ce5b961c976a2903ea2931bc18f9cf54de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-redux-store (npm)
The package polymer-redux-store was found to contain malicious code...
MAL-2025-21305 Malicious code in generator-speedseed-polymer-whitespace (npm)
The package generator-speedseed-polymer-whitespace was found to contain malicious code...
MAL-2025-29497 Malicious code in polymer-redux-store (npm)
The package polymer-redux-store was found to contain malicious code...
Malicious code in generator-speedseed-polymer-whitespace (npm)
The package generator-speedseed-polymer-whitespace was found to contain malicious code...
Malicious Package
Overview polymer-shim-styles is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...