1949 matches found
MAL-2025-147193 Malicious code in rehype-winston-webpack-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213fa15900829f805bf1c60e00d07bf9ff597df2551d6624387e4b55d6343483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d632874fbec3cd15f7617090139bd5b08fba0e32ae4c061de45fdb9738e80ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112542
Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar npm...
MAL-2025-147885 Malicious code in sequelize-webpack-electron-sqlite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c6cef0d1f5fa1940739aefd12c411b829bbad3d9b0e3e28cb1c8356f08516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116106
Malicious code in betelgeuse-ophiuchus-html-webpack-plugin-yakutsk npm...
MAL-2025-149400 Malicious code in webpack-kaus-flare-rehype (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e99fda20e82afdea814a9ed77b877a7de3a8764ca4fffd9bd6948b8fd273ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121837
Malicious code in solis-spica-optimize-css-assets-webpack-plugin-babel npm...
MAL-2025-149407 Malicious code in webpack-sirius-remark-antd (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f628b8907e950e80fb1ed0d48a93a649bfd242b171a87c339eddd24119c505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139530 Malicious code in apollo-server-terser-webpack-plugin-quantum (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242351a23e7cfbb27df8dcfbf0a3ce9e20b76ec9c4b6267b770b2fa7c8a05448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144933 Malicious code in meteor-sagitta-gravity-webpack (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828594916d9bd09aaef2618eea6d415ff52167a88339f2a6c5b4706e6f567eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148548 Malicious code in terser-webpack-plugin-eslint-config-nightmare-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83514a209e4c2489491a7e5fa3f9da4da2466d832fb191284eac4fbc6f3b5ee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149402 Malicious code in webpack-perseus-version-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0bd145a99ea5128f5d6470882e3e2efddd123e1742a090cbad1d83b53255df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149412 Malicious code in webpack-vuetify-prompts-xanadu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc205f3c39b95556edfd8a57a59164599cc6c819582fc203fc01257b8ac60259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141602 Malicious code in despina-octans-metalsmith-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9384bbb9fc0aa0e1f16a71cc9464392c53182e411ef298e21246033a29d53347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144486 Malicious code in local-fork-postgres-html-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a55b74dedb1f55e866a3e57ff1b1150151ebfce27b4a2d1e0fa1033db37c196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142140 Malicious code in eridanus-apollo-webpack-ursa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b6d3fa2f2b87fcc3aa5e1370bba47b406350a2e793c8bc6d599b8bbd58135d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115783
Malicious code in callback-webpack-halley-eridanus npm...
EUVD-2025-124445
Malicious code in nightwatch-ophiuchus-html-webpack-plugin-resolvers npm...
Malicious code in geckodriver-lyra-terser-webpack-plugin-centauri (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 574c8f5ff036967a5e3b226fc20d99ae1fecf14ea93e18b4e9863c82e5c82e5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...