2169 matches found
EUVD-2025-120459
Malicious code in wezen-uglify-js-stop-regulus npm...
Malicious code in pavo-stop-aether-indus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc07d6adfa8c2639fddeb3a5293bf6a4cc3c3acf30f84c04dacd7f8b46a939d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120802
Malicious code in venus-vuetify-regulus-stop npm...
Malicious code in node-sass-loglevel-stop-winston (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7535b8bc3308fea5d62aa18a1d257a3e693dea8b423fcfeac5e9ae315d78a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140608 Malicious code in chai-zephyr-jasmine-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d141d9e454317e0cf8e1698d576224400e48df61534527f0678f0d477a7953c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148291 Malicious code in stop-colors-native-sedna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab01a52a3f41b139889ce3357bc601b3f2ca49d5a2913f21185e024b9c3e0aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146701 Malicious code in protractor-ursa-stop-sedna (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013a698a464cce2a500f25f760be7bc42e4cbb17330e537716c604dc84004c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148287 Malicious code in stop-bellatrix-sequelize-dotenv-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f95ec2b2a6ea8e1d2f211242daea24e2ee014d180e06f0bcf4dd320bfa5b1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123417
Malicious code in prettier-stop-query-indus npm...
MAL-2025-140143 Malicious code in browserify-stop-sagitta-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb65db83237cfff58b0e4af1e88a81f87370bff46c3902bb7ae2cd9deb6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121620
Malicious code in stop-thuban-fetch-electron-builder npm...
MAL-2025-146013 Malicious code in pavo-tethys-stop-css-minimizer-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e80ef22620456b87134e65d7274869649deef01e92932db075a10cbb52bc768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149296 Malicious code in wasat-npm-frontend-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ed7cb4dd2e77f6c32dce0cf92384b480709d841e5b7d1d22b7f7ac3f73bedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149482 Malicious code in winston-cache-stop-request (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e071bb2c1f6703bd47158b0614599e4b4b79ec46dff64657405fff609fcec1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147930 Malicious code in shelljs-ultra-venus-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9801de5bef0e92a080f705b4bb2e883cb39029e1d4442212140cd55decd2c408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145902 Malicious code in orbit-carpo-stop-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc73fb28f30595738f9102c7e9d6150fe6f8e4e3776f6c4746ad2042242533f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123549
Malicious code in polaris-stop-build-async npm...
EUVD-2025-114984
Malicious code in cors-ganymede-typeorm-stop npm...