552 matches found
MAL-2025-148467 Malicious code in taurus-development-sirius-pegasus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be8b5020ffe59b7b9afc50b4ca06dc749d7ade12a8b455458bca24118978902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148481 Malicious code in taurus-semantic-release-auth0-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144239 Malicious code in lacerta-electron-taurus-triton (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3501f859a05328b94c7db37388565d928c8afc4f855f8c268ad98bef89a627ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141770 Malicious code in dotenv-safe-postcss-loader-taurus-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa8407e3f0b9e342b94b70bbf8b4f70cfd62a93df0c308b3f4b6bc8829b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114474
Malicious code in development-taurus-slidev-deneb npm...
MAL-2025-147980 Malicious code in sirius-taurus-achernar-dactyl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50c4cc6027074757c03a706abdd29d05f5adc28296556b0a8cff59c1b16c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148461 Malicious code in taurus-await-ophiuchus-bootstrap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325598ed2d9b61f47852d3de88123386713e9c67d86f0f3ebaf6f8ff11aff1c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148463 Malicious code in taurus-castor-concurrently-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fe561439df87bdc121339b0b1da0ea314d89fbf61cc470407caebb67f86795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115631
Malicious code in cassini-taurus-init-eris npm...
Malicious code in pegasus-ganymede-native-taurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0299fbc6c1fb17da9270c9c40c7ee1e1f3c36a76270c040a793e0f63ca2a63a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122386
Malicious code in rollup-taurus-antd-bootstrap npm...
EUVD-2025-121591
Malicious code in style-loader-neptune-taurus-gatsby npm...
Malicious code in atlas-transform-taurus-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0909ba4909733d4fac4e56663f46711f68ddc92b68de6f9e53ac2818f36279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116243
Malicious code in babel-eridanus-taurus-kronos npm...
EUVD-2025-123876
Malicious code in pegasus-polaris-taurus-docusaurus npm...
EUVD-2025-121452
Malicious code in taurus-phenomic-forever-loglevel npm...
EUVD-2025-114752
Malicious code in csv-schema-alphard-taurus npm...
Malicious code in relay-auth0-taurus-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d514c541e34f485af825f322e9983682defc50b1bc863469364fc19e6b5a556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...