4609 matches found
EUVD-2025-123731
Malicious code in phoebe-yaml-mongodb-umbra npm...
Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d632874fbec3cd15f7617090139bd5b08fba0e32ae4c061de45fdb9738e80ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in aether-yaml-xo-xo (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c20e47718448bce7c573adc07c43b188fb04cbebc66faf58d7f02e82169fc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121514
Malicious code in sync-antares-rehype-yaml npm...
MAL-2025-144944 Malicious code in middleware-andromeda-yaml-inquirer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f6da311037a5e40f15cc5c0d93d855d93fa8d6db6d06ac9d4814a114af351f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148109 Malicious code in spectron-bootstrap-yaml-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f56029d7ba08a16d0e0186ed582f9e0eee3faf4dd11a94341de93ca17195cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142700 Malicious code in frontend-carpo-yaml-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47cc2702bf536ac942f0062c5a6c776da5fc9a135b93382df362258e62dbb975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149449 Malicious code in weywot-xanadu-yaml-install (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af256ea19ec7939f7d812a35ccd8b4063717d2babec01599fb27e8c8eab0868c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142397 Malicious code in express-yaml-ophiuchus-pino-pretty (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6056cfafb6afc410e65e15b7b4d2d799927e7102ac66c802357d7e0e2396c2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149795 Malicious code in yaml-meissa-metalsmith-hermes (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4813c135c90f9f7d46aa55e10b0dc894ba8db0b83c98c60e70abb69347031ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144478 Malicious code in lint-yaml-sirius-soap (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69f697afb55745f73d83f2c2e7a513631930d27a425ade00cad76a2abd531734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149793 Malicious code in yaml-leda-farout-kinetic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b84e713521d8bb7553f1d14e06b9c4cba1e451a5100e82149ecf169a6e37a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-139582 Malicious code in ariel-cluster-yaml-vega (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4ef61cd59299c1e1e48712456761e4f094ccf8cc370ac9410fc8892b0e60bc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-142043 Malicious code in enceladus-yaml-thuban-achernar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46781eef16c099e80d02af004a2d27414141e970c47df84b2291f9f5e131859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-149798 Malicious code in yaml-nodemon-spectron-pino (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89819993aed0670a8dded4f811d832852c1a52c89aca9af1031cc6d0bd7ca03b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147487 Malicious code in rocket-yaml-vortex-rollup-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d811a92aad91f2044cc7af5650b6330b10cfc7c3804ddd909e5bd7a1853b517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111738
Malicious code in library-fornax-start-yaml npm...
EUVD-2025-120130
Malicious code in yaml-polaris-loop-vuetify npm...