4609 matches found
MAL-2025-146427 Malicious code in postcss-yaml-lynx-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7991fb1fffadbc9283f03779f51fa19d71c12c033f9ba3a11c26f4941dcd670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147703 Malicious code in scorpius-browserify-yaml-eris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5520ce8e10cec277d3fefc983acdc1fff0ed1222ccab56f5b7e4b83689c4da72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123918
Malicious code in pavo-mongoose-yaml-development npm...
MAL-2025-146817 Malicious code in publish-stream-radiant-yaml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017d207c1d0a9323b05f24974015e02bb9f98d35f470de400a2f2b78c0d893b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141304 Malicious code in css-loader-gridsome-postcss-loader-yaml (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76708fe5d0a2195e1d55421d5eb35a7bfcffe8ce7ea160c4bdd464e0fe4702b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120133
Malicious code in yaml-nodemon-spectron-pino npm...
Malicious code in antd-yaml-rate-limiter-zenobia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412d07eb97a4f89d1264c3ef0f67ce293e3a765abdab4583afe95d08ead7e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120149
Malicious code in yaml-aquarius-xenos-neptune npm...
EUVD-2025-120136
Malicious code in yaml-meissa-metalsmith-hermes npm...
EUVD-2025-120140
Malicious code in yaml-html-webpack-plugin-galaxy-babel npm...
EUVD-2025-120137
Malicious code in yaml-loopback-cors-postcss npm...
EUVD-2025-113412
Malicious code in frontend-carpo-yaml-hyperion npm...
EUVD-2025-120205
Malicious code in xerxes-yaml-ini-redis npm...
Malicious code in yaml-express-cors-gridsome (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0e357b8c4c2783395d7b2c5be74a839f64a73b1c75175d298ebe42eccec5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122519
Malicious code in restart-yaml-celeste-writable npm...
EUVD-2025-111356
Malicious code in mdx-ariel-stream-yaml npm...
EUVD-2025-123265
Malicious code in promise-yaml-scripts-quark npm...
EUVD-2025-120146
Malicious code in yaml-buffer-nova-slides npm...
Malicious code in aether-yaml-xo-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c20e47718448bce7c573adc07c43b188fb04cbebc66faf58d7f02e82169fc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...