223 matches found
EUVD-2025-114856
Malicious code in cross-env-fornax-hugo-quito npm...
Malicious code in dagda-gulp-quito-grunt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38fa31b4443045d2b86867d4fa9fa611f6bc0f4d9c699520e9f00fad3713e9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in relay-sails-postcss-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc150921682f088a1426ed36fc0f6647fe46145d69038f28d3b158ffd8f1d85d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in perseus-figures-gemini-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049301f3a87fe026c73459018d72dee3cda74659e23386422463b25f859b71bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122933
Malicious code in quito-bellatrix-polaris-foundation npm...
EUVD-2025-114149
Malicious code in element-ui-castor-janus-quito npm...
MAL-2025-141774 Malicious code in dotenv-safe-quito-sagitta-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bd17f282b80e518fd36af5bd8237ddb4c4be6a734607ebdcbbb5d20ec0adee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114076
Malicious code in enceladus-quito-global-style-loader npm...
Malicious code in typeorm-quito-kronos-toml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa15073daad5e8a60298fbc642c1ae162fa2de4f67fd522d7d20ce9811065b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115009
Malicious code in cordelia-kastra-mui-quito npm...
Malicious code in quito-sequelize-process-promise (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a364f0c2f21a239ce270b172475644f8ad2280cdbb911451b5f5295a5b4c6d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121429
Malicious code in telesto-quito-halley-electron-builder npm...
EUVD-2025-122913
Malicious code in quito-weywot-luna-nightwatch npm...
EUVD-2025-124345
Malicious code in nodejs-quito-deimos-publish npm...
EUVD-2025-123188
Malicious code in proxima-quito-middleware-library npm...
EUVD-2025-120244
Malicious code in xenos-phenomic-quito-aether npm...
Malicious code in protractor-aldebaran-native-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec0d5cc0e40ec412b1d438650ad8c4376000d846c37ff0e84f10ed2b00b6ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cross-env-fornax-hugo-quito (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5556dec0ff1baab79d034a74410e4b22fd331310a5e83f3480bf3f6fe9730afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ora-quito-grus-rocket (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 643befccad9b0ccbd5d75a5f78a66ee502c68a4358851c90d4a6f2a201d5dc08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...