114 matches found
Malicious code in unpleasant_leech-strongdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a58e14a54043da48538a957b34d7f18e69301a32f7997e0792706aad946efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76571
Malicious code in independentjunglefowl-strongdev npm...
Malicious code in internal_beetle-strongdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9711b4536a8074abc2369706c0fb94ff33d015794bea749750c4d8005bdc3e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-74932
Malicious code in bindingcow-strongdev npm...
EUVD-2025-75676
Malicious code in seniortapir-strongdev npm...
EUVD-2025-77055
Malicious code in dramaticgoldfish-strongdev npm...
Malicious code in able_giraffe-strongdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14ca669678daf2926d030d13337c7b33ce140e75effa1f40cb6eb0c972fc70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75132
Malicious code in yuckydolphin-strongdev npm...
EUVD-2025-75835
Malicious code in relievedspoonbill-strongdev npm...
EUVD-2025-77154
Malicious code in deafxerinae-strongdev npm...
EUVD-2025-76632
Malicious code in hurtkangaroo-strongdev npm...
EUVD-2025-76387
Malicious code in lonelycod-strongdev npm...
EUVD-2025-76458
Malicious code in knowncoral-strongdev npm...
EUVD-2025-75044
Malicious code in agreedferret-strongdev npm...
EUVD-2025-76827
Malicious code in followinghummingbird-strongdev npm...
EUVD-2025-76743
Malicious code in gorgeousbeaver-strongdev npm...
Malicious code in gorgeous_beaver-strongdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b89c8182fa8d975a1c38ad97aace48b63fec77a52b17f69efb076f4177e49b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76064
Malicious code in paralleltarantula-strongdev npm...
MAL-2025-99264 Malicious code in agreed_ferret-strongdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7568fb5b6a21c1505290c92c8cb5bff480ca4f626f42de58442f36db9d71051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...