5194 matches found
MAL-2025-148221 Malicious code in sqlite-atlas-dynamo-passport (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14187cef271cc4426484306893a6fee37db7948f0787533e5623a7551d59d9dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145487 Malicious code in nightwatch-sqlite-frontend-ceres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b00438414a1d05247d07d79b8384dbb973407ca000f4e44d02b9467d274865a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143644 Malicious code in inquirer-cosmos-sqlite-shelljs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bc7f48dbc1cbcc3b88ab693e3d514765eb32df9b7bd5a8c673dbe9e7371df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149256 Malicious code in vulcan-sqlite-delphinus-arcturus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a2dbc5e2a98413df3d411b122fb5cfda40dae48e086dc6727b46b09ef38033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147885 Malicious code in sequelize-webpack-electron-sqlite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c6cef0d1f5fa1940739aefd12c411b829bbad3d9b0e3e28cb1c8356f08516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148226 Malicious code in sqlite-event-nodemon-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68018707cd81a7cff1bfc2becc80cda5eb58c8d8c33a490decc2a5785a14804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in winston-sqlite-typeorm-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0583ba8d9067af98e95c066865b38f493fe46011683758f8afbd70d2cea4b9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148236 Malicious code in sqlite-pm2-meteor-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd3c5f43018356c9e82eaca0f0f7ba7363ea55334dba08dfc09a72bdaebb0fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148243 Malicious code in sqlite-transform-luna-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2e1c0baf148c725b306ad0cdbbc0621ad0c6b25c3f9486da86908af334f598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144158 Malicious code in kaus-vega-oauth-sqlite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8eccb7ff3878e6e3a8763872691dd769cf8ba2ee0a73255029d37d5963dd2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123014
Malicious code in quantum-materialize-sqlite-jovian npm...
EUVD-2025-121691
Malicious code in sqlite-orbit-xenos-heka npm...
EUVD-2025-116293
Malicious code in await-sqlite-betelgeuse-fork npm...
EUVD-2025-122038
Malicious code in sequelize-webpack-electron-sqlite npm...
Malicious code in grus-pulsar-sqlite-geckodriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2e248f5b89242e943362341bbfaf38bf9eda746454a0e845ee2aacaceed9773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122807
Malicious code in redis-sqlite-odin-cosmiconfig npm...
EUVD-2025-114587
Malicious code in delphinus-kaus-ariel-sqlite npm...
EUVD-2025-116770
Malicious code in alphard-nightwatch-reveal-md-sqlite npm...