Lucene search
+L

209 matches found

Snyk
Snyk
•added 2026/09/18 3:30 a.m.•13 views

Malicious Package

Overview link-uglify-js-fermiparadox-auth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

9.8CVSS5.8AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/09/17 8:41 p.m.•5 views

Malicious code in link-uglify-js-fermiparadox-auth (npm)

Source: amazon-inspector b06dca166a8b4d24c9ce17bffd59e25dd73bad52a682aa28c3d281a6d192b7b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:15 a.m.•5 views

Malicious code in koa-uglify-js-css-minimizer-webpack-plugin-tectonophysics (npm)

The package koa-uglify-js-css-minimizer-webpack-plugin-tectonophysics was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•4 views

Malicious code in kaus-uglify-js-version-node-config (npm)

Source: amazon-inspector 31193f251a950336823c83c49adcc35a2cc3615550b6484a164e03c4c24f51a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:14 a.m.•2 views

Malicious code in juno-uglify-js-tethys-thermochronology (npm)

Source: amazon-inspector ca3b11671ecb29ff8f1e78656346b4fcd45de13ee2feb8648e6425fdce8d720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:16 p.m.•3 views

Malicious code in jekyll-deneb-uglify-js-paleobotany (npm)

Source: amazon-inspector 109a31ec4ecb8c6fe12865a5cd17692e49813a95e0fe551e48adb90c53366ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:16 p.m.•3 views

Malicious code in jasmine-uglify-js-cygnus-markdown (npm)

Source: amazon-inspector a68c8187bb9a4d759fc7a92576e1862dc9d507e32cff5c91a862a9c51dba18dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:13 p.m.•4 views

Malicious code in inquirer-uglify-js-enceladus-cassini (npm)

Source: amazon-inspector 8dac992d54e031808f0d4cbce7b9fee6834ba37d2373079f38f7ef0836abe08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:12 p.m.•3 views

Malicious code in ignite-xenos-uglify-js-hugo (npm)

Source: amazon-inspector 2c6b28600d0a5b6fc572d1b0eb6ef55abcfaeae911378facaaa2446d3aafea59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•3 views

Malicious code in hermes-stop-uglify-js-axios (npm)

Source: amazon-inspector 16dcc90e620362e4bd555b092eb9d0b9b3ab2e93e176b6bb7ee96fb441b8d923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•3 views

Malicious code in helmet-uglify-js-slides-link (npm)

Source: amazon-inspector 8a4372843c68d0ab83fdf1e3d01d8d915ed392cda5c8a6504c932dc3ad4f3f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•3 views

Malicious code in helmet-dactyl-flare-uglify-js (npm)

Source: amazon-inspector 57bd1c045b58ad64b757331e6f73aabe93eb2e88d53c053b83f4c13383b3f05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:00 a.m.•3 views

Malicious code in helios-uglify-js-nextjs-kaus (npm)

Source: amazon-inspector 9c6948ab4c43a4459026e7fab984c2823c9512f7a3204cc4437e5d1a651020ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:58 a.m.•4 views

Malicious code in grunt-vega-deneb-uglify-js (npm)

Source: amazon-inspector eaf5f5efeb36f11ed5f3666ef5624a5e0ff840fe8020a24130d5693875258221 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:58 a.m.•4 views

Malicious code in grus-asthenosphere-uglify-js-corvus (npm)

The package grus-asthenosphere-uglify-js-corvus was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•5 views

Malicious code in eslint-uglify-js-prettier-stylelint-apex (npm)

Source: amazon-inspector 6b6b2bb74bf3b7aed40d3f995dea53524d211b734c6ff0edb05c27f258273c18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:45 a.m.•3 views

Malicious code in eslint-config-apollo-uglify-js-metalsmith (npm)

Source: amazon-inspector 8a4aba2baee216127b0c025e606eb26aeea734c1225a518563943331c359874f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:44 a.m.•3 views

Malicious code in eris-firebase-uglify-js-csrf (npm)

Source: amazon-inspector e22b8691eb931f80f9c446b1e16b1d7b9aec3edef7313e383b600ac3e3e040a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:44 a.m.•2 views

Malicious code in epimetheus-regulus-sass-loader-uglify-js (npm)

Source: amazon-inspector f4ee18d4709d88ba8bd65ce29f6d0c2c42a6ec04ffd410f7c61eb189f5442f80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:44 a.m.•3 views

Malicious code in epimetheus-uglify-js-figures-rest (npm)

Source: amazon-inspector 0ba4c6c38b08a1edcc6330d629aab361871c08e39409c9f9c85f472c1eb1503f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder