Lucene search
+L

188 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 8:15 a.m.•4 views

Malicious code in kinetic-release-it-perseus-ursa (npm)

The package kinetic-release-it-perseus-ursa was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:15 p.m.•3 views

Malicious code in jabbah-release-it-enceladus-jest (npm)

Source: amazon-inspector 58ba66041401f9fbf53f8c5df1da308bcaecccb8d8b4546cbfbc2b5d9a4fec37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in iota-json-release-it-chai (npm)

Source: amazon-inspector edc6039f43772804867eff0feb0b3fb834d4017115e87fd7edea16f77618515f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in iota-release-it-stream-xenos (npm)

Source: amazon-inspector baa57807101bbccb1ed65d8bbde73a1aec0b5c86283b35a5d44a29439362fb73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:13 p.m.•3 views

Malicious code in install-release-it-celeste-xanadu (npm)

Source: amazon-inspector 01d313480dbdd2fa4b3e74b79097939cc709006077b268b6f7739ebbbb5a559f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:13 p.m.•3 views

Malicious code in ini-release-it-pyxis-auriga (npm)

Source: amazon-inspector 61773a0ece38bef11fd9b5fb4ad27ba85fae3abf3dcd63868c9fabccbc105b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:13 p.m.•4 views

Malicious code in indus-bootes-release-it-mui (npm)

Source: amazon-inspector 8f90ebc335a7deb65c4931a3acab28e00302095cd25fc35c9c9f3136c512ae0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:13 p.m.•3 views

Malicious code in indus-elara-selenium-release-it (npm)

Source: amazon-inspector 5ff588a44ca74115a9a95f239324707c0ab7d8d3c107f29073a2e4a54dec5fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:12 p.m.•3 views

Malicious code in impulse-pino-eridanus-release-it (npm)

Source: amazon-inspector e8168435c54621630cc4dc2b62e83d9bc97325824d39293359dd328c3af275f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:12 p.m.•5 views

Malicious code in impulse-panspermia-release-it-europa (npm)

The package impulse-panspermia-release-it-europa was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:01 a.m.•3 views

Malicious code in hyperion-release-it-halley-radiant (npm)

Source: amazon-inspector 6398d96b583df5659abde30c24efdd2a4079e89db4c12b764d5adab1d17b39ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•4 views

Malicious code in hexo-iota-release-it-epimetheus (npm)

Source: amazon-inspector 17f83a9d526b35e0af23d3d425be9a0ef87caa366f722a9b99e5f69b23f8b7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•4 views

Malicious code in hercules-betelgeuse-build-release-it (npm)

Source: amazon-inspector af8705cb1053e89ed2a14becdd01e0d3d70ae1c4a565c3176eac6a1bcd5fd245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•3 views

Malicious code in helmet-supercluster-release-it-technosignature (npm)

Source: amazon-inspector 6c7a022452e3dc430840391ae69399409360dc46577b5416d489a22c8a8fdbe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•2 views

Malicious code in helmet-release-it-enceladus-figures (npm)

Source: amazon-inspector ac31376fc97d374897aa40e11086913141414c12cb08ebf5b53dd7f29a6780fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:58 a.m.•4 views

Malicious code in gridsome-release-it-cluster-antares (npm)

Source: amazon-inspector fc8a82147ad830cbc9da53e0a7feb5a348448c61a836c3fcd2825a9c42a3856a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:58 a.m.•3 views

Malicious code in gravity-release-it-grus-hermes (npm)

Source: amazon-inspector 09062d217f2cab9bc84d5fd2de53209547f227b4b9adf43d81b1da9e14b92407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:58 a.m.•2 views

Malicious code in got-release-it-nodemon-callisto (npm)

Source: amazon-inspector 2424016c8ee5e47eacbc475dc2f28d025a81a82cbae0be1a60689f3d65c1ba49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:46 a.m.•4 views

Malicious code in exoplanet-titan-repository-release-it (npm)

Source: amazon-inspector bb748b13772ac2b3d0e6639c132da44357b100b1af4c90f2461a77eedc3a62d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:44 a.m.•5 views

Malicious code in epimetheus-release-it-fetch-centaurus (npm)

Source: amazon-inspector cc286cddc9b68a29d158425dc814ed9cc8de7a7cdd3c89822a899de1ace22dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder