Lucene search
+L
GithubRecent

163870 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•10 views

Malicious code in library-update-commitizen-jabbah (npm)

Source: amazon-inspector 97f9907c91e0e0fd8eb3295044a11a6a9a0d6513f2fc950b21059db2c7ec5b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in library-thuban-galaxy-pino (npm)

Source: amazon-inspector e3662286e5cc98f31fa21e440791aa479d49ef39b59c4043f6bc39600a6eb144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in libretee (npm)

The package libretee was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in libxmlfinal (npm)

Source: amazon-inspector b00664d7d8c2cad969c4ae81a3e41100c2d896bb0fc1eccde422b4c676e9bf9c The package libxmlfinal was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•7 views

Malicious code in library-pavo-impulse-andromeda (npm)

Source: amazon-inspector 1d31e4d280cdca6c12df48113661a624a5d83d3a2ed8857bd5d0f30f6d9198c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in libxmlaboba (npm)

Source: amazon-inspector 05a7df278a8ac96b2c657db06cba777fda3bb1a02a55961d7cf8d944b99a8c33 The package libxmlaboba was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in libusbip (npm)

The package libusbip was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•9 views

Malicious code in library-bellatrix-cli-cors (npm)

Source: amazon-inspector dc1df04aae6a025d35e24d1c99352e79b2f30d9b4b6ff361adaaeeaa36618854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•4 views

Malicious code in libi-common (npm)

The package libi-common was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•4 views

Malicious code in libhbaapi (npm)

The package libhbaapi was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•4 views

Malicious code in liberal_takin_indigo-2 (npm)

Source: amazon-inspector bab7807a5edc123a5a99e4a73664ed7e94887707ca08c08eb60d94c994d03433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•3 views

Malicious code in liberal_urial_z3n (npm)

Source: amazon-inspector db6c00b94e8ed1921f23792709869c38472ab4d9ee4fedcdb035b1a6637585f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in libparty (npm)

The package libparty was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•7 views

Malicious code in library-loop-centaurus-request (npm)

Source: amazon-inspector 7e94a394ff4a3c9fe9b4d0840644983f11065ae70f6dded50fb5bd439dce54e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•10 views

Malicious code in library-chai-carina-nuxtjs (npm)

Source: amazon-inspector bf871770e94c007e352f573d44b0c9597e55491ca57363731adcfa816c01b711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•8 views

Malicious code in library-babel-meteor-kronos (npm)

Source: amazon-inspector 7a9e462c051102c828b4d50e3973255ce834bba491eed99cf30b6f877f08521f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•5 views

Malicious code in libhid (npm)

The package libhid was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in libnpmpublisher (npm)

Source: ossf-package-analysis cbc99d8f4d7a237d575dfffb34417a94d05225074ca8e91959d8929a1308ee06 The OpenSSF Package Analysis project identified 'libnpmpublisher' @ 99.3.5 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•3 views

Malicious code in libmii (npm)

The package libmii was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•7 views

Malicious code in library-cassini-apollo-request (npm)

Source: amazon-inspector 80554e528c2a2f596f1e60989a7b44f1288d8ee48a9cbc1fb9477c1c18324a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•5 views

Malicious code in library-blaze-heka-lint (npm)

Source: amazon-inspector d51b8af5044f50a93459386244d570c089c10f5bcba81f155c01e484f9c28712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•7 views

Malicious code in library-eleventy-start-semantic-release (npm)

Source: amazon-inspector 2ef5c3375e9382697062795f0b29e5fe5a516d4292590c3003a1e2eef900faa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•7 views

Malicious code in library-capella-tectonic-child-process (npm)

Source: amazon-inspector aad6929a0d0d976d5d901ed69745f745aa60c1112cc89324dcf4401cade4b817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•5 views

Malicious code in libnpmpublishing (npm)

Source: ossf-package-analysis 000ac1f9e3e24873823d90fa6c4785583e0f65c86d7c26847dd8819079f1e6e7 The OpenSSF Package Analysis project identified 'libnpmpublishing' @ 99.3.5 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•9 views

Malicious code in library-commitizen-webdriver-manager-neptunology (npm)

The package library-commitizen-webdriver-manager-neptunology was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•3 views

Malicious code in library-betelgeuse-yonder-scorpius (npm)

Source: amazon-inspector 40d464d999af81bcaceefdd858dd914d406dc75800c99c9aaf27487492862826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•4 views

Malicious code in liberal_sparrow_z3n (npm)

Source: amazon-inspector 291f82093af89ce46612cc4a1f8723ae75c9ec00c2edc96e38526fd7eae9425b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•7 views

Malicious code in libjs-cqs (npm)

Source: amazon-inspector aed1ca0473a0b4d14330082b90a8fa15e7f1dfc671361ad4ef8c2dac38b130b0 The package libjs-cqs was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•9 views

Malicious code in libpnpmpublish (npm)

Source: ossf-package-analysis ec46bf85afceffde52ecf130dc77cf4bc7602601683fa3b6bb41a0d1c417eb18 The OpenSSF Package Analysis project identified 'libpnpmpublish' @ 99.3.5 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activit...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•5 views

Malicious code in libmap (npm)

The package libmap was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in libfluid (npm)

The package libfluid was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•8 views

Malicious code in library-dotenv-safe-gridsome-singularity (npm)

Source: amazon-inspector 015ef35070afb3d62e79edffcfc89b48d4d0856e6ce0ffcb8848971476865a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•4 views

Malicious code in library-markdown-proxima-cluster (npm)

Source: amazon-inspector ca9c2073aae74647e97388d9c473e9c7c2d900d2eeb496eefa9b2a58d0a3f326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•4 views

Malicious code in library-ganymede-axios-phoebe (npm)

Source: amazon-inspector f2f571dda046abcbb1c1c42ee2c0d27e57c8f35d99e5bc05f426ef1ffdf76dd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in library-biosignature-bionics-mocha (npm)

Source: amazon-inspector c195849028cdb53692f81b71f60bedc1c41ab1cbecd2d1f708262bccd1f04c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in library-init-flare-pm2 (npm)

Source: amazon-inspector 0bd269a356ae3f884d25ed3afd367540fa7f952b3a55f8746d6c3a7ab5ef34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•8 views

Malicious code in library-fetch-hyperion-vortex (npm)

Source: amazon-inspector ca2c4eff15bede06787b56a8f8b27dea6ef1f37f7ce1a8ee13de06cce88a6df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in library-apollo-sagitta-relay (npm)

Source: amazon-inspector 2a145c3f36268692e8ce0afac7243096912fcd83420501e41bb6a4862e17a788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in library-archaeoastronomy-winston-spica (npm)

Source: amazon-inspector dbe3dcb39beccc420438542d11282f21171bd86c34f18ac5d213fcc6caa0eed6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•5 views

Malicious code in liberal_tyrannosaurus-smiletea (npm)

Source: amazon-inspector 2079f5eb7aa26c3301fe868a07c5b2a5452c16e5f93cdd552865f2cb01778997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•7 views

Malicious code in library-frontend-update-eclipse (npm)

Source: amazon-inspector ed2e4f376bb17f8ffc87980fa0da0d846405540d49493c4df426758297bec270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•5 views

Malicious code in liboccam (npm)

The package liboccam was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in libinoro (npm)

The package libinoro was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•6 views

Malicious code in library-alphard-nova-planetology (npm)

Source: amazon-inspector d124aff39da9d10edbd76e65c207c1bb625940619d25f3d00674c4c381c61ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•7 views

Malicious code in library-kronos-start-ceres (npm)

Source: amazon-inspector 809337d37e779bd9ce52e2cddd68c7fa1c0fb249e9ba2dc8d1c9655e1e3eea5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•8 views

Malicious code in library-magellan-telesto-mira (npm)

Source: amazon-inspector d155bb64f62032962b5f0496237c836db5c08bdb318de1c08938445eec8bd254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•5 views

Malicious code in liblcdgr (npm)

The package liblcdgr was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•8 views

Malicious code in libnfc (npm)

The package libnfc was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•7 views

Malicious code in libpostcss (npm)

The package libpostcss was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:40 p.m.•5 views

Malicious code in library-fornax-start-yaml (npm)

Source: amazon-inspector 1a6a2c4abb42f5f3186fb4734f53bb98dec2cb33af1fd697699823bbf6cfe4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Total number of security vulnerabilities163870