11712 matches found
MAL-2025-148312 Malicious code in stream-chalk-elara-node-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e8742ef7707e771c8ceaf7750f9e26d84d6f5e2fa92e9bf32fdaa0178bef63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in xenon-oauth-framework-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dce1782e99ecf2a9a1ac060d68897c127bf998539a101ddbcb4e03d4c4e560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114354
Malicious code in dotenv-safe-hyperion-karma-stream npm...
MAL-2025-148311 Malicious code in stream-bunyan-selenium-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbf6cfd3f3b1fe6e04e80d1120452bdc3262f19277791c0d067efd9c340506c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121606
Malicious code in stream-impulse-halley-eleventy npm...
EUVD-2025-112561
Malicious code in impulse-react-bootstrap-gacrux-stream npm...
EUVD-2025-121125
Malicious code in transport-stream-nebula-phoebe npm...
MAL-2025-143552 Malicious code in impulse-react-bootstrap-gacrux-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeeb91210fb4388357c7e75117778a2bbbfacf234dd1abd657a2fb9009212a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121610
Malicious code in stream-fornax-capella-public npm...
MAL-2025-143459 Malicious code in hydra-stream-express-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff343e869eea3d3afef8aa2d1b4b440a33ca6d31bae23e02944b00880df9f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113520
Malicious code in fork-less-loader-stream-spinner npm...
MAL-2025-148325 Malicious code in stream-magellan-gemini-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc1a5821362da55f8fdc0cde30e4181ec5f14528ba675a4d31bd8448ac96cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123306
Malicious code in procyon-stream-registry-perseus npm...
EUVD-2025-121599
Malicious code in stream-mysql-typeorm-halley npm...
EUVD-2025-112501
Malicious code in ini-xenos-stream-webdriverio npm...
Malicious code in publish-stream-radiant-yaml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017d207c1d0a9323b05f24974015e02bb9f98d35f470de400a2f2b78c0d893b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146616 Malicious code in procyon-stream-registry-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681ef514413c1e789bfdffdc7059f185ece03f8909580844f7250a0342b40bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112195
Malicious code in jest-castor-stream-altair npm...