Lucene search
+L

199 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 8:39 p.m.•8 views

Malicious code in leda-style-loader-pyxis-izar (npm)

Source: amazon-inspector eaec0232e4a46f48d132b5c24d990bc8257f4d2882219fe80a1de80736883a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•5 views

Malicious code in lacerta-style-loader-mini-css-extract-plugin-less (npm)

Source: amazon-inspector 222914e44e98bf610164e7ab4d3b3240a1bf355716c59e8661864f5d3de0ffc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•5 views

Malicious code in kastra-style-loader-scorpius-mui (npm)

Source: amazon-inspector 145a70e265be9cbc19dfdf8058afabde0e060e18d1a3622c1b8a0df5620bf0a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•6 views

Malicious code in jwt-element-ui-jekyll-style-loader (npm)

Source: amazon-inspector 8437bf4f418fb44e983d5e9aee58d0bb513d11557003ae832a6b0eeeaabaf637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•4 views

Malicious code in juno-style-loader-sedna-janus (npm)

Source: amazon-inspector 7bb1edc4673f0ed82d4bb87c438df25a1a79f430859c6849eac0dc14a34c4644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:16 p.m.•5 views

Malicious code in janus-style-loader-alphard-remark (npm)

Source: amazon-inspector b46be8a3b2073afdb630484fc8ae7adbabb0cdfec815282e31cf67e4fbd09eec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:15 p.m.•3 views

Malicious code in jabbah-loop-corvus-style-loader (npm)

Source: amazon-inspector 7d56eafd05e6c679c487885f25fbaf0ce07c2a85970d27f3e50365e0dc846a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in iota-style-loader-lepton-cygnus (npm)

The package iota-style-loader-lepton-cygnus was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:01 a.m.•6 views

Malicious code in hyperion-build-style-loader-lynx (npm)

Source: amazon-inspector 12c2c49786a819fb2277b7d7fe04a6cc6c4ad22bad453495d8c818dd4aa2e701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:46 a.m.•4 views

Malicious code in exoplanet-izar-superposition-style-loader (npm)

Source: amazon-inspector 886be052250c8da22409a509f63c9e24a06168838b56a8677333e16aa414e897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•5 views

Malicious code in event-style-loader-quasar-materialize (npm)

Source: amazon-inspector 4f3f6d6b77dc2f520cdb7ba4f987505cb6723918edc979b94239282bd9a3e49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•4 views

Malicious code in eslint-plugin-pyxis-library-style-loader (npm)

Source: amazon-inspector cf79a19acb73dbbede82dbfef01183fef070d4bb00c153e59937a9e5a306132d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:44 a.m.•6 views

Malicious code in epimetheus-html-webpack-plugin-markdown-style-loader (npm)

The package epimetheus-html-webpack-plugin-markdown-style-loader was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:43 a.m.•5 views

Malicious code in enceladus-quito-global-style-loader (npm)

Source: amazon-inspector 24c2bcc353ee64b14034393fc907da69d7c5bac0586ce770626437ed50d7952f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:42 a.m.•5 views

Malicious code in electron-eslint-aether-style-loader (npm)

Source: amazon-inspector 1d1f7548f783c12e5c8d0c42b73eac3624796ce6e399f4eba565d01f3f352840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:42 a.m.•6 views

Malicious code in elara-style-loader-comet-async (npm)

Source: amazon-inspector 4ab4c1c4efa7b3926279345b2e9565aada7886b972c1b9b8ce7413517ab3c5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:35 p.m.•5 views

Malicious code in dotenv-parse-variables-scorpius-borealis-style-loader (npm)

The package dotenv-parse-variables-scorpius-borealis-style-loader was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:33 p.m.•6 views

Malicious code in deneb-scorpius-style-loader-morgan (npm)

Source: amazon-inspector 3241b3a8b5f7a423b90c3eee199d223a222af6d8e90cbf1d0784b08ac4bb7ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:33 p.m.•5 views

Malicious code in delphinus-jwt-vega-style-loader (npm)

Source: amazon-inspector d56a0489e227f87a51124ec28f0433242c31269ba85105ff53e90fe143e98125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/06 11:32 p.m.•5 views

Malicious code in darkenergy-style-loader-style-loader-node-config (npm)

Source: amazon-inspector b63bf79b92c5f6a95a6dce7dc164aa540cba55e4dccae81f7f45965620fdf7ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder