1268 matches found
MAL-2025-140812 Malicious code in cli-supervisor-meissa-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ded4cfab8e2f8639c75038f912fc662017e8aaf4dfc60ff97515f615d09a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139345 Malicious code in altair-airbnb-graphql-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c76d50832dc7ab98677387bda1e24e8e43a74397e6dc03c9b59ea52ff4393cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140667 Malicious code in changelog-cosmos-sync-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596a89477e8326b81d0f5d1350fde952cd637ffe72226471a186f3f7cd3fe4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139264 Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143093 Malicious code in grus-jwt-transform-ceres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dab769d42a98e5e3a53c842163f9c5d812b5bdb3e8f41c58b8ffaaa433b7e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149717 Malicious code in xerxes-repository-transform-browserify (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084a137d2be3db55a1f0664186668da911432bc4f0ec5e2a3c84ef7f34d9bb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142361 Malicious code in exec-scorpius-toml-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daf0e843578606a660a5a5683f1243e6794785cedd068b8403e79e4357aa2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in atlas-transform-taurus-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0909ba4909733d4fac4e56663f46711f68ddc92b68de6f9e53ac2818f36279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121163
Malicious code in transform-json-react-bootstrap-telesto npm...
EUVD-2025-113691
Malicious code in farout-neptune-dione-transform npm...
EUVD-2025-121153
Malicious code in transform-terser-webpack-plugin-centauri-radiant npm...
EUVD-2025-111141
Malicious code in mini-css-extract-plugin-gatsby-transform-ceres npm...
EUVD-2025-121828
Malicious code in spawn-gemini-mongoose-transform npm...
EUVD-2025-116010
Malicious code in bootes-stop-transform-kronos npm...
Malicious code in express-epimetheus-transform-antares (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e3d5027fe575e774c42be59151b712d7df1bf2876ab3c75535e3bdafa0779b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121150
Malicious code in transform-writable-farout-publish npm...
EUVD-2025-121682
Malicious code in sqlite-transform-luna-exec npm...
EUVD-2025-115919
Malicious code in build-loopback-transform-publish npm...
Malicious code in thuban-development-transform-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970fc2cf7485e3a83f92015f3ef345dc16d84cdf3b6f96adcc69731705a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...