940 matches found
EUVD-2025-176659
Malicious code in rest-rocket-lint-staged-triton npm...
Malicious code in ariel-blitz-rocket-concurrently (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cb285d99f4b49e9979cd77120e8d94e6e4991534997b5ca1d327e51aa6b78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176610
Malicious code in rocket-vortex-nebula-barnard npm...
Malicious code in rocket-dynamo-supervisor-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b41f5a989473e5be9b2bc5751e31d7d24fad060b49d6606c000ce2dc8d72f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178686
Malicious code in google-radiant-weywot-rocket npm...
Malicious code in rocket-eleventy-alphard-changelog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e513a76e72e1fca6eec63742d1bdca68ae829e5cdedb6e60687eab86480607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176613
Malicious code in rocket-package-sass-loader-avior npm...
EUVD-2025-178124
Malicious code in less-loader-rocket-adonis-kronos npm...
MAL-2025-189259 Malicious code in rocket-got-heka-json (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778e69e1b6a1c981f67cb6ad0fce677345c087976404dfb27b70709dfe9619e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-188376 Malicious code in nuxtjs-steganography-dynamo-rocket (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b011db95a7eefc14dc52ac07963321debbf596a0cb901153713ef86d2f4e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177506
Malicious code in nuxtjs-steganography-dynamo-rocket npm...
EUVD-2025-180421
Malicious code in antares-jasmine-rocket-start npm...
EUVD-2025-179911
Malicious code in cache-xenos-regulus-rocket npm...
Malicious code in quito-rocket-radiant-middleware (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1027d85e5f5fe77252e470808dec33a66a0131fb5706d9c2bdc7aef3e9a7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176891
Malicious code in puppeteer-rocket-bioinformatics-elektra npm...
EUVD-2025-178298
Malicious code in janus-rocket-crust-xerxes npm...
EUVD-2025-179955
Malicious code in build-farout-cz-conventional-changelog-rocket npm...
EUVD-2025-176823
Malicious code in quito-rocket-radiant-middleware npm...