375 matches found
MAL-2025-149615 Malicious code in xanadu-vortex-commitlint-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d64f87e6cce76f6ff4efed0deb7484278a6ba8041ff40ef0ff4b4e35deb5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142495 Malicious code in firebase-eleventy-protractor-vortex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0798504104232bd981669802bf8d352aef1ac84de841bfc470416a94c4a6512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vortex-octans-adonis-sirius (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4832831988a84233762d969fc55c8a6d390648259d338d79c3a6ae09efd58d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120738
Malicious code in vortex-scripts-scripts-webdriver-mocha npm...
Malicious code in colors-vortex-phoebe-husky (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df9cf3eb42d2f5ed6e088a87e33540bc56bfed7f1f9ded003fbecbd6a1cc13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120745
Malicious code in vortex-loglevel-deimos-webdriver-manager npm...
EUVD-2025-111287
Malicious code in meissa-prettier-plugin-markdown-celeste-vortex npm...
EUVD-2025-111937
Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex npm...
Malicious code in airbnb-vortex-lint-hugo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9266b166c4dea6a6abc04e078f1ea3067f96d87b4a0526a0e99ac96c7fe4705f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in vortex-request-websockets-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d27d80aa80b3476f8aacf646ef4d6f99528afde9c24988a8d62218931ed277a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113005
Malicious code in grus-vortex-astro-sedna npm...
EUVD-2025-113570
Malicious code in fomalhaut-hapi-request-vortex npm...
EUVD-2025-115241
Malicious code in colors-vortex-phoebe-husky npm...
EUVD-2025-116473
Malicious code in async-native-vortex-lynx npm...
EUVD-2025-116134
Malicious code in betelgeuse-betelgeuse-carpo-vortex npm...
EUVD-2025-116836
Malicious code in airbnb-vortex-lint-hugo npm...
EUVD-2025-116804
Malicious code in algol-local-cordelia-vortex npm...
EUVD-2025-120737
Malicious code in vortex-taurus-less-enceladus npm...