263 matches found
MAL-2026-7055 Malicious code in @bmg-web/bmg-spinner (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sketchfab-spinner (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f004e2139080a087917f5cfc654423a3ed60ca232dd8a051955d6af9508b1a8f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
EUVD-2025-201857
Malicious code in sketchfab-spinner PyPI...
MAL-2025-192380 Malicious code in sketchfab-spinner (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f004e2139080a087917f5cfc654423a3ed60ca232dd8a051955d6af9508b1a8f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
EUVD-2025-175990
Malicious code in test-on-spinner-docusaurus npm...
EUVD-2025-179985
Malicious code in borealis-promise-spinner-ora npm...
EUVD-2025-176249
Malicious code in spinner-cryptography-acamar-elara npm...
EUVD-2025-176076
Malicious code in tachyon-mesosphere-spinner-pm2 npm...
EUVD-2025-175971
Malicious code in tethys-deimos-spinner-eslint-config npm...
EUVD-2025-176312
Malicious code in sociobiology-promise-spinner-docusaurus npm...
EUVD-2025-177641
Malicious code in nestjs-postcss-loader-slides-spinner npm...
EUVD-2025-176248
Malicious code in spinner-proxima-cybernetics-cosmochemistry npm...
EUVD-2025-176868
Malicious code in quantum-sirius-spinner-sirius npm...
EUVD-2025-179815
Malicious code in centaurus-superagent-spinner-leda npm...
EUVD-2025-178440
Malicious code in impulse-dependencies-spinner-figures npm...
MAL-2025-185509 Malicious code in apollo-spinner-solis-rigel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d92bc8e061659af9912ea6207249e0e7d6993cab9fd076885c4a2971c386498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-186707 Malicious code in elektra-bellatrix-neutronstar-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4f90b5692e853c91bc5bf63fb6ee8aca89c7b606140be3793dc608467693e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189989 Malicious code in transport-ursa-spinner-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af491f95d646d3d4421bbe34372859a3bc57e2f6d476a3d03eda099aaecb9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in regulus-nova-resolvers-spinner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b92e9b55e91662d691c1bb85ba291aed8b091512b2005652721926e607e4363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...