6395 matches found
EUVD-2025-113307
Malicious code in ganymede-io-canopus-sync npm...
Malicious code in izar-cassini-ursa-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844171ec081664cbf20fd1c8c743f71ddc8ecc7ef40ef3b54fb7c6215ede00e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145369 Malicious code in neptune-mui-jasmine-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd1df8a6d2bc023876d443ab956c891fa6eed3e890a12c4ae30e21b71e81c3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112956
Malicious code in halley-mysql-server-sync npm...
EUVD-2025-112414
Malicious code in io-hercules-css-loader-sync npm...
EUVD-2025-121492
Malicious code in sync-wasat-deimos-hapi npm...
EUVD-2025-121495
Malicious code in sync-sedna-titan-neptune npm...
EUVD-2025-121496
Malicious code in sync-rigel-prettier-stylelint-concurrently npm...
Malicious code in oberon-puppeteer-sync-eclipse (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80b69b8816f3158c875c37490b6600acf86a642161971dc108a3b68d9273ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149339 Malicious code in webdriver-manager-yakutsk-meteor-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 875fff606ab52451855235f1681354d08bcefb6c29a25fd69abbfd5a0fdd9a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142987 Malicious code in got-sadr-mocha-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d82631c478969a084a95044f545da8cde4bbd9f304f27c6bded05d9020213a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140696 Malicious code in chariklo-gulp-sync-child-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da4da04f9f6c5b6991dcb2017d11ee5925ffc8c98afb5519309453f5c30e25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120267
Malicious code in xenon-sync-despina-heka npm...
Malicious code in carina-rate-limiter-perseus-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0de077fa85a8aac069d8b85948635a847e137b4cec30da3ac961db323496c642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144467 Malicious code in lint-staged-sync-global-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b9f543858dd41d5c201e3ced1a84ac7806a02565e07ef4cca4bd240aa85d04a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111624
Malicious code in local-odin-sync-public npm...
MAL-2025-148971 Malicious code in uninstall-sync-apex-event (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189409f4dc200c6e26d27168dc6d08f0262204ea0a085b6a5af402e6a94c250d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140667 Malicious code in changelog-cosmos-sync-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596a89477e8326b81d0f5d1350fde952cd637ffe72226471a186f3f7cd3fe4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...