679 matches found
MAL-2025-69587 Malicious code in necessary-rose-lark (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941da22e570bb4ece2c41326970134a0091f10af69c955913f6d2cd04696cc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70622 Malicious code in silky-rose-echidna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088a26c663c7494dbfde2050790bf881f5cbe6e3b95cce3e7f517dc8ca2669df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-67005 Malicious code in bloody-rose-constrictor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da676bcf52118dc04dd94274fe69502a840fa95fd2da3dee1299438027c6f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-51884
Malicious code in spicy-rose-mollusk npm...
EUVD-2025-55052
Malicious code in curved-rose-finch npm...
Malicious code in main-rose-echidna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c12b25a27635c108d12ed4d1c57e79034142dd264d29617696882c1ac1669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-55290
Malicious code in competent-rose-pheasant npm...
Malicious code in sympathetic-rose-peacock (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233bd7f698af77d5ef537c312bdbb86fd34cc7e3e25071036e954f329904e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-52680
Malicious code in precise-rose-fly npm...
Malicious code in boiling-rose-felidae (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4498da734a7f8037fd72d392c1692a1645643af23b5b4389028476e43a63ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in parliamentary-rose-swallow (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b727651060212a60cb1256b61b518f24b0dc2b142602872a55457521669cb78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-53253
Malicious code in military-rose-puffin npm...
EUVD-2025-52452
Malicious code in raspy-rose-pike npm...
EUVD-2025-53928
Malicious code in hostile-rose-crane npm...
EUVD-2025-51010
Malicious code in worrying-rose-centipede npm...
EUVD-2025-55164
Malicious code in cooing-rose-clownfish npm...
MAL-2025-68420 Malicious code in free-rose-snail (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b272696f94e863e2b56b85ac9a06d05c0a77a205cbd1f8e08f5a00462ed3cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-70607 Malicious code in shrill-rose-opossum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701ebe54e2710a358995bcc0ac3b2940c4729788bd2dae185030e8f8256b9f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-71221 Malicious code in unable-rose-whale (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7298374d8544f5faf21010e36db809189e2306a9b9330b323ee85be402c78776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...