54415 matches found
Malicious code in grunt-xml-mira-axios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e5a7b127a43b5290a63aad4f13783c26ae6574a23f418fa7d4576816cd8d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123700
Malicious code in pino-loop-relay-xml npm...
EUVD-2025-114114
Malicious code in eleventy-envconfig-xml-private npm...
MAL-2025-140493 Malicious code in castor-rest-orbit-xml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829f11bce1bd5202c40fe72edba2aeca19e4d77af75efa888c3d72fbdcb49c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112680
Malicious code in husky-xml-dagda-redis npm...
MAL-2025-149363 Malicious code in webdriver-mocha-xml-spica-wezen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec266b47cfc06dde6c7a72e9b172666365f66ef20758d077d60b99f88019d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-146847 Malicious code in pulsar-xml-nextjs-eleventy (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0199654cd2a544402f7fa4493d46c06e17e6e76ea2056d0a17ae90f068059f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-143103 Malicious code in grus-taurus-xml-kinetic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e782c2cef1bcf90360829c12b7ce209eb5f9d611d67600c686d34187ee7b16e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139868 Malicious code in babel-pegasus-xml-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c99cfe63d56d39e7c66715a4797bb30032ba8dd6254bdf514d52cf979e3706c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142232 Malicious code in eslint-plugin-galaxy-xml-canopus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa440b71749d145fde8a670cbb74a95100ff3d22173356b9d0dd9711ff2d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140031 Malicious code in blaze-request-xml-tethys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ffd5543df0e4db9f532f3624ab9714d84734558324dc27ad9121b17db8a5f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139533 Malicious code in aquarius-adonis-vuetify-xml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ff73a1b6084a0a234b5afc948ee60df5e2b6dfabeb69b2b8cfbef60243f9ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145920 Malicious code in orbit-xml-nightwatch-chakra-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a3f62aee87ee36ab9ad55455abe4b9e4f611eec1f01293cd9ecf65ddebba0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120566
Malicious code in webdriver-mocha-xml-spica-wezen npm...
EUVD-2025-112778
Malicious code in hermes-xml-auth0-sirius npm...
EUVD-2025-120195
Malicious code in xml-tool-spectron-webdriver-antares npm...
Malicious code in sagitta-lyra-leda-xml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb780c8c954985b5ef0b82b4a8234f723923b792e3b06ab8a105705d67ef2d13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114082
Malicious code in enceladus-gemini-xml-sails npm...