915 matches found
MAL-2025-147792 Malicious code in sedna-semantic-release-gridsome-janus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200f5eb4d63522bd7104b3839da11edf43c7e7966ba5db0d95c58bb23422c0e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145991 Malicious code in pavo-backend-neptune-semantic-release (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f009fc94282448f94d549e5083edd53f17a564701a16a40d3fe4789833cff28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147845 Malicious code in semantic-ui-dorado-install-version (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ccfa7972b9cb33163150c44046b4b5df5a9d2dad60889d40a58d663e43864ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in jsonp-semantic-ui-indus-prettier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a62c4202aa5d3e648e089cc503ce1079d1905c826f1b74e3530769393b47b8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148239 Malicious code in sqlite-semantic-release-chariklo-mysql (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a70877cf6fc7144944e3d17633b64feec401c7798f2edb05735691b1437526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147849 Malicious code in semantic-ui-jupiter-celeste-chai (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3f13d58c06befb22e193f9117b1df12449898bb2a695c46c907b21ca14bb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111241
Malicious code in metalsmith-dagda-ganymede-semantic-release npm...
EUVD-2025-120057
Malicious code in zenobia-semantic-release-wolf-celeste npm...
EUVD-2025-124624
Malicious code in native-quito-venus-semantic-release npm...
MAL-2025-147833 Malicious code in semantic-release-pavo-winston-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79981c099c9d1ef7e0a447288b3f3a95d5de7a9bf8ba48b90112ecf212dbed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145139 Malicious code in mongodb-semantic-release-elektra-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c718397129adb9c3c718f37bf5cecd57fc85c2c49618154e9f7ad5114f9696d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140452 Malicious code in carpo-semantic-release-kaus-jovian (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f109704ac2f7e249ef4083f207485a8d26ee826962f8c0a3ac0e7a23f2f4bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147836 Malicious code in semantic-release-sails-webdriver-mocha-npm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ced23e9d6990208bad63cf4763ab6e387ae390922047846eb57c6b9cfe68bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146114 Malicious code in perseus-semantic-ui-publish-local (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b71fb1de6b922a4162887d97be7ff4e0e59a478a124163c67f61a729dd21dade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122086
Malicious code in semantic-release-sass-loader-commitizen-eslint-config npm...
EUVD-2025-122095
Malicious code in semantic-release-impulse-taurus-standard npm...
EUVD-2025-120916
Malicious code in upgrade-geckodriver-semantic-release-superagent npm...
Malicious code in semantic-release-loglevel-mongoose-buffer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7d4379a07b9b657c57b819077071e16d07701bbada1f2a463dfa01a43464e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...