12082 matches found
MAL-2025-141755 Malicious code in dotenv-safe-hyperion-karma-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41545b93f714faf7d695c18bdad4365cb382c7a187442a99e2252a943a2c2cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124705
Malicious code in mui-stream-jovian-canopus npm...
EUVD-2025-116162
Malicious code in bellatrix-jsonp-octans-stream npm...
Malicious code in ultra-stream-cli-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919da0e5107515453a1601a96d63ff99ed9feb3133d9d1590a4a91432c96de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in algol-stream-node-config-enif (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb942e7823a23ce7a4b12798c95aa39e61aa96644c69acca7860bcca2ad9de76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148321 Malicious code in stream-leda-auriga-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b525d2e79ef4e291e46c88814c73119552dc5a92d8c9f11ab0f740660fd2555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142605 Malicious code in fornax-airbnb-callback-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7bb38b97ebf222467227cf0d8a16a2bccbe710490976a742213e6145637fc84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123659
Malicious code in pipe-dynamo-nodejs-stream npm...
Malicious code in xenos-mongoose-stream-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543220c92b709fbd84ab7dee3437d98384e534d88ea98d4540436d68d8e573fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122342
Malicious code in sagitta-await-nightwatch-stream npm...
Malicious code in command-gulp-stream-stream (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce8a4d9de37e9592ba9e3c891cf04f83429c155a22194a21fdf1bb9a7af61ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112875
Malicious code in helios-odin-start-stream npm...
EUVD-2025-114351
Malicious code in dotenv-safe-lint-standard-stream npm...
EUVD-2025-116453
Malicious code in atlas-mini-css-extract-plugin-equinox-stream npm...
EUVD-2025-111356
Malicious code in mdx-ariel-stream-yaml npm...
EUVD-2025-114205
Malicious code in electron-builder-hydra-mensa-stream npm...
EUVD-2025-115069
Malicious code in config-sync-stream-jasmine npm...
EUVD-2025-111780
Malicious code in less-loader-stream-publish-aurora npm...