547 matches found
Malicious code in procyon-query-chakra-ui-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14a8cab438784c55e39f1084827f26f50969dca38f24fbfb7e001ffcc207702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112555
Malicious code in indus-backend-sirius-fusion npm...
MAL-2025-148467 Malicious code in taurus-development-sirius-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be8b5020ffe59b7b9afc50b4ca06dc749d7ade12a8b455458bca24118978902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149171 Malicious code in virgo-sirius-prompts-cache (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f02f8874cbbd0c3c9876281a2bbaa55a1e31356f32b7948983d1e797d2fbc0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149527 Malicious code in winston-sirius-lynx-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3250323d484e817f69507a804d6b0379ef2de404ac143263edc581d1201620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147969 Malicious code in sirius-prompts-thuban-aether (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a3249af939c3e509102ed62de1da79187ada577499b73ff4db43ef95cd75ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139187 Malicious code in acamar-sirius-janus-commitlint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e2d475400fa7007a588d6df6a05d45075c6cf65f9a5f9ad3b00da0e5db62f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147974 Malicious code in sirius-resolvers-quantum-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db3977e1c0b46f69d0641f5f899e596f6e5e405a6391f66e5cb49368d1de315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147857 Malicious code in semantic-ui-test-test-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39408caea52c1551fa2c025eaa9dc9638438e19eda194e02ea83b610ac1c75e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121553
Malicious code in superagent-build-sirius-webdriver-manager npm...
EUVD-2025-122984
Malicious code in quark-sirius-fornax-odin npm...
EUVD-2025-120994
Malicious code in umbra-sirius-scorpius-module npm...
EUVD-2025-116480
Malicious code in async-centauri-sirius-vega npm...
EUVD-2025-121978
Malicious code in sirius-dynamo-cordelia-proxima npm...
Malicious code in sirius-spawn-chromedriver-ini (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc5d124420e86b1c5400344bb1baaefbf2c44048bd0b668422e414bac3499a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121962
Malicious code in sirius-nodejs-pino-chalk npm...
EUVD-2025-114319
Malicious code in draco-callback-gacrux-sirius npm...
Malicious code in husky-callback-algol-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1538e4a9f30831e667538f037c38b18a94ec4a408eba6eb228a4f975a9b8613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sirius-resolvers-quantum-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db3977e1c0b46f69d0641f5f899e596f6e5e405a6391f66e5cb49368d1de315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...