12890 matches found
Malicious code in babel-dotenv-safe-cosmos-resolvers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3417469407bd44b3f14bb735197fa437c74140cf37ad651a4d90e5372f15a1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115020
Malicious code in convict-relay-docusaurus-bootstrap npm...
Malicious code in pipe-docusaurus-docusaurus-pino (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1086f199d13d933abbfe5f631549cb046e455883a60b41cc0ae56d86f83e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120239
Malicious code in xenos-unuk-version-elektra npm...
EUVD-2025-112626
Malicious code in hyperion-markdown-process-nextjs npm...
MAL-2025-148456 Malicious code in tailwindcss-style-loader-corvus-mensa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dda3cbdf0ad64d11cf806ebe3a954d387a100ad64aff35dfb9ca17fcb04b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146781 Malicious code in publish-css-minimizer-webpack-plugin-nuxtjs-rocket (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61de6bef5b68ba25979e912b33bb3e86106a2d722106557cfc8f1fba1d53246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147910 Malicious code in shelljs-chai-remark-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bf01b624bd21b9a8a7cc6878f307cb778c3422e7632f710831cf26d0364bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114896
Malicious code in cosmos-ora-draco-version npm...
EUVD-2025-123624
Malicious code in pm2-eleventy-google-epimetheus npm...
MAL-2025-141650 Malicious code in dione-spica-node-sass-puppeteer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3914e11caf443d84492b59f56eb90f24c3ae39be33691d79c7ce9ecf0555ad0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147052 Malicious code in react-bootstrap-betelgeuse-rehype-betelgeuse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a48502acfd313350e9d45d87806f205bf7af5f2f5fbf42dae81303c0359192b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-138938 Malicious code in precise-lime-cougar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b505d68365aa0468e5dd6d13ddd91a058cea2f92664b66344bab4d240ccb57ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
sudo-rs -- Partial password reveal when password timeout occurs
Trifecta Tech Foundation reports: When typing partial passwords but not pressing return for a long time, a password timeout can occur. When this happens, the keys pressed are replayed onto the console...
Malicious code in tuti-mangga97-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416afa28a1990e595ca707f6b3648394ebc4da06a6e3c24f03eedea100856c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-137621 Malicious code in utomo-bika12-sluey (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af638d4f7c4a477146a490bfa4063640e240c3a1cddb8eb1097823b99c30e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-136532 Malicious code in rare_seahorse_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63143e819b4e036f1a5d8bfa56c2668d775a29fdfd924aa0d656f672a609ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100225
Malicious code in coolmacawz3n npm...