20956 matches found
MAL-2025-141168 Malicious code in corvus-tool-eris-uninstall (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c70e245e0236f09ab23fa8be3ab93de3e17af4507ca9c2ea53298eb3bf1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146236 Malicious code in pino-pretty-hyperion-terser-barnard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df02f906063e61b6da517aab704a23c427a3b32691080d2fd2055d4a068aefe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148743 Malicious code in tool-magellan-weywot-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff21943a5c6a762c7322a56b92c42ea054dd9db5fa7875e2395c6ad5b98625c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143109 Malicious code in gulp-avior-dependencies-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bbb8705b693d6d52006ef9114367afd014aed87916df93c9cc58b8bc8689ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148751 Malicious code in tool-rocket-impulse-dotenv (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69e02ea1de6c0283031e9f19b73ff166dcc8006bfd5f7ab0b19b6d484ba878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vuetify-tool-markdown-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3df5522b27f532b5a84611c13fc2498ead6787a837ac1cc588850e5b2f14bf20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in enceladus-alphard-tool-dione (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc835461937ec8ab9e335744183882bfdb9da209471bb7b831e581a688188008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tool-kronos-cosmos-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed330d8af17fc20256082e46943972fa13d6525c3250e3a246e530e91f9ea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121897
Malicious code in soap-nextjs-init-tool npm...
EUVD-2025-121200
Malicious code in tool-aquarius-juno-pipe npm...
Malicious code in firebase-sagitta-tool-corvus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9f0e4b922b003c40ad9a7753fe86040398d2220a37c9273a23abf24bcd4318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121188
Malicious code in tool-link-hexo-aether npm...
EUVD-2025-121194
Malicious code in tool-fornax-polaris-install npm...
EUVD-2025-115653
Malicious code in carpo-tool-query-commitizen npm...
Malicious code in nconf-tool-magellan-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68a8262a254f0a9406a021375b356e800849625b8e96972eca8a227193dce94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121192
Malicious code in tool-jabbah-inquirer-materialize npm...
Malicious code in spawn-tool-concurrently-umbra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead08f96749eb8ecc215e7d6898f5f5f27989939a7586c619b9a3b01f5f1945d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121332
Malicious code in testcafe-hyperion-envconfig-tool npm...