325 matches found
Malicious code in ini-middleware-build-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2246fe3ca33b8fcca8464aa54b16b62c8bb88ab3d1ac8125772343cdea2de33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124828
Malicious code in mocha-private-cassini-xo npm...
Malicious code in aether-yaml-xo-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c20e47718448bce7c573adc07c43b188fb04cbebc66faf58d7f02e82169fc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121149
Malicious code in transform-xo-eridanus-express npm...
Malicious code in xo-colors-helmet-apollo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03788d4a6215ff1f912ae8e05fe270c7fdc95fec963cfe2a986dd145ebc8908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114645
Malicious code in dagda-castor-xo-callback npm...
EUVD-2025-120364
Malicious code in wolf-xo-meteor-figures npm...
EUVD-2025-120178
Malicious code in xo-rehype-phoebe-callisto npm...
EUVD-2025-120539
Malicious code in webpack-bunyan-xo-babel npm...
EUVD-2025-120177
Malicious code in xo-repository-chai-subscription npm...
Malicious code in xo-xo-dorado-despina (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dec1d28f5e610ed95566e988ecace1c38f5d99f2d6d9c46363ac04c650a1a154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in slidev-xanadu-xo-castor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf83cbecd9577fec842ad64f7f847b168a1ad3aafbbfbceda5b0741cc06aac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111613
Malicious code in local-xo-supervisor-prettier-stylelint npm...
EUVD-2025-120187
Malicious code in xo-auth0-sedna-node-sass npm...
MAL-2025-143175 Malicious code in hapi-antd-dione-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ba1fa7ad9b95e2d278e65f7fd0570ddd801f915a2455530317272b4893438e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123098
Malicious code in publish-xo-deimos-xenon npm...
EUVD-2025-124646
Malicious code in nashira-enceladus-xo-zephyr npm...
EUVD-2025-121477
Malicious code in tailwindcss-readable-betelgeuse-xo npm...