Lucene search
+L

274 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•6 views

Malicious code in link-babel-rehype-bellatrix (npm)

Source: amazon-inspector 6e06c6128285df382318c7cbfc0ab35b0ede2d70825130103f6a655c3d8ab296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•3 views

Malicious code in juno-blaze-rehype-cz-conventional-changelog (npm)

Source: amazon-inspector e6241065b09716af75551dbb5e650737a8310ebea79da1f6bc7c1d4c078ba7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:16 p.m.•3 views

Malicious code in jekyll-slides-nashira-rehype (npm)

Source: amazon-inspector 7a83d206b421e4fd6755696e33f06ef321c65c7282e0c25b886013a0bce0f115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:13 p.m.•3 views

Malicious code in inquirer-rehype-wezen-relay (npm)

Source: amazon-inspector e55d769614ab0ee9cf3e63d233ac385df04e37a618437fc4209773d35934c5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:13 p.m.•4 views

Malicious code in ini-rehype-norma-weywot (npm)

Source: amazon-inspector dd213bdc423b2ab5c22eace93f80c095bf7484f442dac2efef9cdf02dbaf54ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:12 p.m.•3 views

Malicious code in ignite-rehype-xo-cypress (npm)

Source: amazon-inspector d4a51f0740e1612c51322e453536c8292d2bc79861076bc5c2b152821856564f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:01 a.m.•4 views

Malicious code in hyperion-prettier-stylelint-sqlite-rehype (npm)

Source: amazon-inspector 6521de9c655dbd6f20939704f17ffa28a37be1b632cc49a17cba0b908977d84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•4 views

Malicious code in hologram-oscillation-rehype-await (npm)

The package hologram-oscillation-rehype-await was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•5 views

Malicious code in hermes-rehype-writable-eleventy (npm)

Source: amazon-inspector 8fa3c685d0bd0edf1a3cd5b9568d2d94ca38c3a9e71d7542e1b5e0808955f95f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•3 views

Malicious code in hercules-pyxis-rehype-hermes (npm)

Source: amazon-inspector e6bd5be5cc1ef899ff08e6d1c416a3327828641b760effeecae17fe1c2c25e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•2 views

Malicious code in heka-rehype-duplex-ursa (npm)

Source: amazon-inspector b883096f7d0044441dbff8d74444e22aa646a541ec960cc0db5a82f4552ab9b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:59 a.m.•2 views

Malicious code in halley-dotenv-safe-rehype-cross-env (npm)

Source: amazon-inspector 1331a67bea2e24c847db87b08e88619af87131e0e5509a6b8796b8d4eb5d99d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:58 a.m.•2 views

Malicious code in grus-nodemon-rehype-hermes (npm)

Source: amazon-inspector a6d559410a1d7d46410b0043f04df13062a94d3ab8a1f955226d05167489046f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:42 a.m.•4 views

Malicious code in element-ui-blitz-rehype-perseus (npm)

Source: amazon-inspector e5703559ccb48b8cadd72f98806f257de1c353bc73844645d168a5122d81971d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•4 views

Malicious code in dotenv-parse-variables-rehype-webpack-dependencies (npm)

Source: amazon-inspector be0b6deac8969176b38f0fd93430562f99b91efa0466cafc73a3c3f46527705c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•5 views

Malicious code in docusaurus-thermosphere-aquarius-rehype (npm)

Source: amazon-inspector c9cff65c97dcfbf5b82d994578654a3152ecc637488be528804a85e738be615d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:33 p.m.•3 views

Malicious code in deneb-oauth-changelog-rehype (npm)

Source: amazon-inspector 7d5c02fed0ca0d742c365b1cfaadbba82eea79ac78e874e946f8a81179862300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:33 p.m.•4 views

Malicious code in delphinus-rehype-sync-cassini (npm)

The package delphinus-rehype-sync-cassini was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•3 views

Malicious code in dactyl-meissa-cordelia-rehype (npm)

Source: amazon-inspector d5096e683de4ed48821505a467a23a9050506b39c2f385d375f677beb5d31c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/04 7:17 a.m.•3 views

Malicious code in cz-conventional-changelog-ora-rehype-xanadu (npm)

Source: amazon-inspector d30da5642d8eb286ad5b4cb7bc7264d127f1bfcc86f5b5a6e20044ae8ebc9862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder