113 matches found
Malicious code in inevitable-amber-vulture (npm)
Source: amazon-inspector 35032f1e740f359b451e6e7d4618a5eb198315fdf6b38e5e3f30a003334306bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in honeycomb-vulture-tbp716-project (npm)
The package honeycomb-vulture-tbp716-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in honeycomb-vulture-zfl489-project (npm)
The package honeycomb-vulture-zfl489-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in hissing-peach-vulture (npm)
Source: amazon-inspector db12b3d27d546a3c861f8df02ec38d7d4572c14c66078f890cfd0cf3b3c7375c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in enchanting-turquoise-vulture (npm)
Source: amazon-inspector 234689944a502e4eb3cf26411ab53ac99f308dec1f3514248a40c224dddd3164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in enchanting-amber-vulture (npm)
Source: amazon-inspector aa08ea77b8364a8a8b65d1f68d9036e14452f9fee6d342d57dba367813fe8e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in emerald-vulture-ywp144-project (npm)
The package emerald-vulture-ywp144-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in crystal-vulture-ywt305-project (npm)
The package crystal-vulture-ywt305-project was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in anxious-indigo-vulture (npm)
Source: amazon-inspector 7bb72d977790c508ef97e8fb512e4661f385874d01ffa0c88039113fcc763522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
EUVD-2025-117414
Malicious code in enchanting-amber-vulture npm...
EUVD-2025-100048
Malicious code in yammeringvulturez3n npm...
EUVD-2025-106754
Malicious code in continentalvulturez3n npm...
EUVD-2025-89405
Malicious code in proudvulturez3n npm...
Malicious code in envious_vulture-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a879aa1065a4a8b4a9fa31e261c67dde9d73680d49d4b0a9c63b2e87e59085c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in superior_vulture-tool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e29dbf93d98d3631726caf6cde327e1ca227e39596becdcf94f4ca7908011f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75225
Malicious code in wellvulture-appteadev npm...
EUVD-2025-75501
Malicious code in superiorvulture-tool npm...
Malicious code in subjective_vulture_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c88c89d71f7cf0868f36a1b723807529a5b8a62d42ef8acaa40b3da16d1e5fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in willowy_vulture_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83c3eb6e38a48bda78746a04770bb6350d77ae037ba4d31515db3645fa76075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...