94 matches found
Malicious code in interferometry-zephyr-procyon-wavefunction (npm)
Source: amazon-inspector c90d3fdb8a6bb17b1d45c5df60e592b70ccb57cc45f6b28ca5ea04d9fd8e2e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in hydra-regulus-wavefunction-spectron (npm)
Source: amazon-inspector e6a0feec94c7f2caf416d31bfddb17c067b095aa118051f9ba4b9b3b53c348af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm)
Source: amazon-inspector 3ecf14a07cd348f4aef4bf71dd063f333aee890c7b9fffa4af049cac1d997ef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in html-webpack-plugin-wavefunction-local-ora (npm)
Source: amazon-inspector e9b889caa4d6bb6e7f090a2532d0cdfd4fc1ca62791b86087f1d8923688f6937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in hermes-paleontology-taurus-wavefunction (npm)
The package hermes-paleontology-taurus-wavefunction was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in enif-wavefunction-phoebe-kastra (npm)
Source: amazon-inspector 5529fe0b8e93a9c6aca887f4acba242427e40e99e7c53ab28047e01d9aae23fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cosmicsilence-nightwatch-wavefunction-rest (npm)
The package cosmicsilence-nightwatch-wavefunction-rest was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in commitizen-singularitarianism-framework-wavefunction (npm)
Source: amazon-inspector b8b3787db0e3080dc4c7cf8ed44e346fae5522edb2e0c52bb3534a8686af71b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in cluster-wavefunction-subduction-transhumanism (npm)
Source: amazon-inspector 1d0e6bd0652b5e4d018e928834eec7a01faca00e01d4f657865eee6364dbb3b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in augmentedreality-version-wavefunction-spawn (npm)
Source: amazon-inspector 2503586da8fb0802fa3367acc3e22e67b9d508d0ea7d14123f3ec4edda2e8203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in antares-wavefunction-biosignature-magellan (npm)
The package antares-wavefunction-biosignature-magellan was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in altair-paleoclimatology-wavefunction-library (npm)
The package altair-paleoclimatology-wavefunction-library was found to contain malicious code. --- Credit: OpenSSF source...
Malicious code in achernar-meteor-wavefunction-titan (npm)
The package achernar-meteor-wavefunction-titan was found to contain malicious code. --- Credit: OpenSSF source...
Malicious Package
Overview hermes-paleontology-taurus-wavefunction is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organizatio...
CVE-2026-2258
Affected software: aardappel lobster up to 2025.4. Vulnerable component: WaveFunctionCollapse function in library dev/src/lobster/wfc.h. Issue causes memory corruption via local manipulation. Exploit has been published and may be used. A patch is available (commit c2047a33e1ac2c42ab7e8704b33f7ea5...
MAL-2025-188290 Malicious code in nightwatch-nashira-wavefunction-perturbation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c4b64c33f7412381a1d500dcafadddadb2f2c59a0d9bf14721c9e7e3ff107f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-190249 Malicious code in wavefunction-parallax-jovian-jasmine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938e05e40ad6861d8df01b57009bd79edb9c666be6fa41d3d26d00852d06cb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175630
Malicious code in wavefunction-ariel-pavo-equinox npm...