1575 matches found
MAL-2025-140377 Malicious code in canopus-xanadu-markdownlint-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0db4becaf61d04f82a2b7159858b15dc737727a86bd0c3f376ed3aaaa44ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149140 Malicious code in version-mdx-development-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7ea97e441bc8365483bdd5542b8f2597dbb2c78a69fee43619fa2f272459ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148402 Malicious code in supervisor-semantic-release-vortex-jest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6100947e9d3906df533eeb01f8f6999202033b601f432aea1b8763b8a6e819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111943
Malicious code in kinetic-europa-apex-sadr npm...
EUVD-2025-115739
Malicious code in canopus-pavo-hexo-metalsmith npm...
Malicious code in mongodb-semantic-release-elektra-delphinus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c718397129adb9c3c718f37bf5cecd57fc85c2c49618154e9f7ad5114f9696d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116670
Malicious code in antares-polaris-vuetify-wolf npm...
EUVD-2025-123423
Malicious code in prettier-plugin-markdown-xml-ursa-magellan npm...
EUVD-2025-112978
Malicious code in halley-cressida-gacrux-hyperion npm...
MAL-2025-144520 Malicious code in loglevel-run-script-cross-env-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5274bbe00f3f0fdea25171e1d9b6e8028893566b13e1a05f6160aae69d26a73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117000
Malicious code in visiting-black-caterpillar npm...
EUVD-2025-117307
Malicious code in inc-tomato-hoverfly npm...
EUVD-2025-117235
Malicious code in mechanical-amber-panther npm...
EUVD-2025-117326
Malicious code in historical-yellow-walrus npm...
EUVD-2025-100077
Malicious code in xaver-sasag85-wekto npm...
Malicious code in cognitive_canid_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e00247abc8ce946848d32ca39bc2a87ad6ebcf10f5a82e15b96db20512ed501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in mulyono-tumis85-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc51b302d77730476677af6879b0623be9bc7e221ce55d97a9499fecb37303d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100216
Malicious code in woodenchipmunkz3n npm...