11160 matches found
MAL-2025-148199 Malicious code in spinner-hydra-mocha-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef413f567ba077fea84d7d2996097ce31721cd68e7bf89ed81889d68c55bf1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rest-andromeda-ora-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a92c88fabf7123e7ffb64c069cfb3f6a546e509857b2531c764b7e04bf9748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123475
Malicious code in postgres-rest-fornax-enceladus npm...
EUVD-2025-116876
Malicious code in aether-build-rest-epimetheus npm...
MAL-2025-144584 Malicious code in luna-start-prettier-stylelint-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b36b0e4f7b57545761987514b8adc6f3738abe536c5fc6500cc9826bb2af1d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140493 Malicious code in castor-rest-orbit-xml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829f11bce1bd5202c40fe72edba2aeca19e4d77af75efa888c3d72fbdcb49c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147363 Malicious code in rest-rate-limiter-xanadu-helios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c30e78fac1e9a3f7fe1c7a1edd56dd8dd4ba3d954eae49fa7bf2dec37f7404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147351 Malicious code in rest-hyperion-await-phoebe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3be05d1458b5599c326fbc3293c83e93e49d0db9185fcf229d5a2615ecf53d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141218 Malicious code in cosmos-rest-commitlint-config-angular-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5f62624d7af56b3ad9391610058a9c8347af8babae64bee75e0cb6963cf960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147879 Malicious code in sequelize-standard-terser-webpack-plugin-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5497a671c1aebf3e09ba8f4b72a87f5f04dbb1c4d50e8410873150d2e2023aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147364 Malicious code in rest-rimraf-auth0-comet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308cc6969d5c0fd9d5fb4f300fda62ca7b42b335cd50278fad17ece90c2621cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139657 Malicious code in atlas-rest-quantum-toml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9902762b166cf43320d02a48cffdb04c5ee77d718482f98ae39137072d974b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dagda-fusion-altair-rest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f094ba9baa49f34d1f0414a382a467ee52bf655487152b52bfbc124b6c8b5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147357 Malicious code in rest-nebula-apollo-bootes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0e592212057e4f165a5bc594516e43446e0dd16e1cd02b54fffe7ff5314842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114975
Malicious code in cors-rest-charon-koa npm...
EUVD-2025-122583
Malicious code in rest-andromeda-ora-oauth npm...
EUVD-2025-116662
Malicious code in antares-sirius-janus-rest npm...
EUVD-2025-122574
Malicious code in rest-galaxy-command-sqlite npm...