5069 matches found
EUVD-2025-123607
Malicious code in pm2-sync-convict-react-bootstrap npm...
EUVD-2025-121649
Malicious code in start-mongoose-scripts-sync npm...
EUVD-2025-124169
Malicious code in oberon-puppeteer-sync-eclipse npm...
MAL-2025-140667 Malicious code in changelog-cosmos-sync-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596a89477e8326b81d0f5d1350fde952cd637ffe72226471a186f3f7cd3fe4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145953 Malicious code in parcel-carpo-cypress-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51611f11cebf50b4cdacfccdd2e1979e08f8252c810d6cd9c4f167da72720ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144540 Malicious code in loop-yonder-betelgeuse-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c945f5dae18315f4787680fe0df2b8745a6117d6af0a32e4b1857099ceea2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139647 Malicious code in atlas-karma-sync-galaxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3aba52d0957eacf7f9cb58860dcaaebcd83e86487cc6f8cf730279da91a6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149339 Malicious code in webdriver-manager-yakutsk-meteor-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875fff606ab52451855235f1681354d08bcefb6c29a25fd69abbfd5a0fdd9a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149664 Malicious code in xenon-sync-despina-heka (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369147ecc3fd9f002d219d214dbb663fca66744f31c9b335a4d8d3c6307092d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146373 Malicious code in polaris-sync-procyon-sagitta (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434d4b6bbcde4dcf7e4fa46ea40212da7acbc15f97dd7d0c59b9c7366c8048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in dependencies-sync-eridanus-bunyan (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aa69c1f04a21c437aa1c182048b5f6146d8ac5ee652093cdb056f483f5db7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141159 Malicious code in corvus-luna-chromedriver-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc57845ad897dab7e51dc698f8f4a85f4640e5b4759380e4673f476f8d7a59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145060 Malicious code in miranda-sync-despina-auth0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddac1488fe65453e57b62caf85d562e3e2b5eda8fc296fa78fca7fd5046bbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121514
Malicious code in sync-antares-rehype-yaml npm...
EUVD-2025-121497
Malicious code in sync-relay-rocket-scripts npm...
Malicious code in izar-cassini-ursa-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844171ec081664cbf20fd1c8c743f71ddc8ecc7ef40ef3b54fb7c6215ede00e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121501
Malicious code in sync-norma-algol-jsonp npm...
Malicious code in airbnb-colors-sync-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fc7d0428c018b9d34e73281aa3acd0df3ba2771cef2f568249f03b9b919a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...