844 matches found
MAL-2025-178100 Malicious code in polymer-tehh-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8005420f14b73e1818fdd4cc898cca4592448fa7dbfa825030acf466837db330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-138590
Malicious code in polymer-afaj-rofifdsafafa npm...
EUVD-2025-138347
Malicious code in polymer-avonf-ahaafo npm...
EUVD-2025-138253
Malicious code in polymer-datdfsadsid-ragadadr npm...
EUVD-2025-138390
Malicious code in polymer-avoafifa-fagihagga npm...
MAL-2025-177874 Malicious code in polymer-avonf-afofi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76bcd8b2f4da87a3074e28a6f02b4d1d32379e2cae31c256fdbf6fa86a00fdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-177928 Malicious code in polymer-datsid-radar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94dabe2472312d9fb060bc8109910d184a70584370873b1ec241321c549462e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-af-rod (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27c822c670493ea25f440e6eaf47abd8f51bc885dbb196b2e56a190f39e532b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-138536
Malicious code in polymer-afia-ga npm...
Malicious code in polymer-intfsi-adufi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5341d2665d9c77c7b18755236900f1d82a12533cdcd2b6d3c9081567be4c87a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-ini-adf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 832c1c99d14408568497be44cbfefe7c07de60e230a23fea28185bc516ca3e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-intsi-adf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6f6803fe6fb84ac1a8eeb84ad8e9aa2d96406644709facfb7bbf0446bfeb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-inti-adf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cadb5cd720701e98705f1db09ac67ce5b961c976a2903ea2931bc18f9cf54de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-minats-burn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8539fcf80f11151725a45262add6ea7baf81491a4c3e75eaf032b854261f8203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-164453 Malicious code in polymer-intfsi-adf (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5ddacfa304dbe818fce49e39f43e5c449960ce72d871f585a36b1dfe7ab3796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in polymer-redux-store (npm)
The package polymer-redux-store was found to contain malicious code...
Malicious code in generator-speedseed-polymer-whitespace (npm)
The package generator-speedseed-polymer-whitespace was found to contain malicious code...
MAL-2025-29497 Malicious code in polymer-redux-store (npm)
The package polymer-redux-store was found to contain malicious code...
MAL-2025-21305 Malicious code in generator-speedseed-polymer-whitespace (npm)
The package generator-speedseed-polymer-whitespace was found to contain malicious code...
Malicious Package
Overview polymer-shim-styles is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...