9261 matches found
MAL-2025-143552 Malicious code in impulse-react-bootstrap-gacrux-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeeb91210fb4388357c7e75117778a2bbbfacf234dd1abd657a2fb9009212a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in hydra-stream-express-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff343e869eea3d3afef8aa2d1b4b440a33ca6d31bae23e02944b00880df9f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in stream-magellan-gemini-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc1a5821362da55f8fdc0cde30e4181ec5f14528ba675a4d31bd8448ac96cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114728
Malicious code in cygnus-stream-lyra-apex npm...
Malicious code in algol-stream-node-config-enif (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb942e7823a23ce7a4b12798c95aa39e61aa96644c69acca7860bcca2ad9de76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112653
Malicious code in hydra-stream-express-lynx npm...
MAL-2025-148327 Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae29f63ab3edd79a6f27157b2a92d2fd2d219f65bf803de9275b448418c9dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142605 Malicious code in fornax-airbnb-callback-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7bb38b97ebf222467227cf0d8a16a2bccbe710490976a742213e6145637fc84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120279
Malicious code in xenon-neptune-phoebe-stream npm...
EUVD-2025-121600
Malicious code in stream-magellan-gemini-webpack npm...
EUVD-2025-116909
Malicious code in achernar-charon-triton-stream npm...
EUVD-2025-121820
Malicious code in spawn-registry-hapi-stream npm...
Malicious code in grunt-stream-rest-browserify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738247151f180588c56546db685b85a7ed478e77a9961371b2a46f8c2610da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in stream-impulse-halley-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f43ed0fe224677a8bd0b3ddeca70ab4093b2d2108e29be6a7fb5bd8c529553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121596
Malicious code in stream-run-script-got-morgan npm...
EUVD-2025-121603
Malicious code in stream-link-stop-csrf npm...
EUVD-2025-115069
Malicious code in config-sync-stream-jasmine npm...
EUVD-2025-121597
Malicious code in stream-phoebe-adonis-promise npm...