20956 matches found
Malicious code in tool-leda-mensa-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b95d1def0ebe38a27307afda5860d3791590b4b58b35ed77dd3d816d43a09c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111873
Malicious code in lacerta-geckodriver-tool-private npm...
Malicious code in tool-sails-nodejs-resolvers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd93e3471899ae35d729a7f8c6bdeca06ee3b377bb9447f02dc441b537fe77a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121176
Malicious code in tool-sails-nodejs-resolvers npm...
EUVD-2025-121774
Malicious code in spica-apollo-iota-tool npm...
EUVD-2025-116089
Malicious code in betelgeuse-weywot-cache-tool npm...
Malicious code in corvus-tool-eris-uninstall (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c70e245e0236f09ab23fa8be3ab93de3e17af4507ca9c2ea53298eb3bf1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123400
Malicious code in prettier-stylelint-tool-ora-solis npm...
MAL-2025-147026 Malicious code in radiant-tool-postcss-loader-algol (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4499499c8548c0ac5d008278a2990487d0bf10c924b79a538991ba90a0eee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148738 Malicious code in tool-kronos-cosmos-sass-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed330d8af17fc20256082e46943972fa13d6525c3250e3a246e530e91f9ea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143507 Malicious code in ignite-callback-node-config-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8894545ee7492ce0676852567fe5d3d6b2139f08799c38602766a6a8f7f91fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142613 Malicious code in fornax-commitlint-tool-docusaurus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c66a4fed949a6c247a8e793979fb01e4d622f1b18b9cbe545578ff45b4dce3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141596 Malicious code in despina-fusion-typeorm-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40abb8a24d7c690b5112addea229e5308d47adda807501e929ab97cdaacc57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146149 Malicious code in phoebe-dotenv-parse-variables-command-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece3d0a3c92e4d2ae8824dc2f384b219324b821124e6158568921eabf59b6ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121201
Malicious code in tool-andromeda-kinetic-scripts npm...
Malicious code in jupiter-bunyan-tool-charon (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8928e876b0f2f7dc596c3128c5fc8e0a7208ece48d1e902d00073c1726a6b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in meissa-altair-tool-node-sass (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfcb585bb376fa6399f28e68f625a5eba7bfffbda84afbbf3dbf4877a5a221f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122896
Malicious code in radiant-tool-postcss-loader-algol npm...