323 matches found
EUVD-2025-115455
Malicious code in chalk-passport-xo-mensa npm...
MAL-2025-149567 Malicious code in wolf-xo-meteor-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412da3d5b464f3ed5815a795d7eb08b586d9b4fc392cd09d79ea6cd8f12ec3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120174
Malicious code in xo-sirius-cors-canopus npm...
MAL-2025-142786 Malicious code in galaxy-bulma-xo-halley (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2af6b2e3df23281628418462d1f455c10e7b7c6a8a9eb87057cbb7bdf9bd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141640 Malicious code in development-xo-pegasus-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c96b3a002fd84313582346e0279eb4c4b80b80e4021e090a04a37692156c7d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148123 Malicious code in spectron-redis-xo-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26507e079d9a939a5ac7f3360656f3c2de560dca7b8b275b5fbca2ede529c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148451 Malicious code in tailwindcss-readable-betelgeuse-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ae0e6f8a06367e95d49b65de1d5493df1d604d1155ae3b584b2a93917b4da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116855
Malicious code in aether-yaml-xo-xo npm...
EUVD-2025-123347
Malicious code in process-xo-triton-farout npm...
EUVD-2025-121537
Malicious code in supervisor-callback-xo-gridsome npm...
MAL-2025-149757 Malicious code in xo-sirius-cors-canopus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a706eabb5bc1ada3cbadf53709853d49ed268736f58f26c9c2c37e6a7549e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141464 Malicious code in dagda-castor-xo-callback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-145622 Malicious code in non-blocking-sqlite-toml-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2d064b51a14b25c29553073d981f25fb78805790a2a4cbb554a1dc26efbc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in equinox-miranda-achernar-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c8de5522a4e10c92463701c201ae813abede03a36430c363f3d3a3e580f9db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115298
Malicious code in cli-sedna-xo-tool npm...
EUVD-2025-113244
Malicious code in geckodriver-jabbah-ignite-xo npm...
EUVD-2025-111306
Malicious code in meissa-ini-xo-fomalhaut npm...
Malicious code in geckodriver-jabbah-ignite-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4507051c332a729b6cc8aa5e646269609ee1d1a86c0e98c10de96f5fb7770530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...