Lucene search
+L
GithubRecent

163873 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•9 views

Malicious code in lagoon-thistle-slk112-project (npm)

The package lagoon-thistle-slk112-project was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•10 views

Malicious code in lagoon-infinity-iyv611-project (npm)

The package lagoon-infinity-iyv611-project was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•3 views

Malicious code in lagwxo-devapptea (npm)

Source: amazon-inspector e42a5b95b274c1746c7b5b503e4737ffe30350c5dee78967a8d72cec5cf3d55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•10 views

Malicious code in lagoon-thunder-top089-project (npm)

The package lagoon-thunder-top089-project was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in laila-bakso86-ruro (npm)

Source: amazon-inspector 09d27ca0f2ea7b8e1ff0d13fc3753071076d6e8eae1e4abbcbd8b8e2e6a201ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in laila-bakwan95-breki (npm)

Source: amazon-inspector 1a2b339cd80693dd2e842b9425d376d10b22e85731c3477102df4a7e89b5c000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in laila-bakwan63-miaww (npm)

Source: amazon-inspector 7f07007dcb2ddf5187a9bb2276deaad2b3190bee1d860b0a6d6795e8800ce7d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•3 views

Malicious code in laila-bakso3-riris (npm)

Source: amazon-inspector f6888df0ffcdf9e0f538cb385fe94d2baa2fcdc6ab7f0297d99f62823b42c93b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•8 views

Malicious code in lagoon-jewel-shr048-project (npm)

The package lagoon-jewel-shr048-project was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•3 views

Malicious code in laila-bakso63-miaww (npm)

Source: amazon-inspector e37fa4d96bf18ab02ca3bb305454242614573014e7bb738f6e2637a32a42b98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•3 views

Malicious code in laila-bakwan27-ruro (npm)

Source: amazon-inspector 1a08025fc2ef1390b928c2dc8157fcf253dbe2e2b3c1de6042b4ce985d762863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•3 views

Malicious code in laila-bakso68-sluey (npm)

Source: amazon-inspector 0b3d4d90d799e8d4b65809a249b52a255af4573d6c9a7f6f1951b47cf32f8407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•3 views

Malicious code in laila-asinan53-miaww (npm)

Source: amazon-inspector d28f7cbd5f2260dc22cf329b7e3f76480544c660a88875ee10fe4d5d0f131d3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•3 views

Malicious code in laila-asinan48-riris (npm)

Source: amazon-inspector 7b98c6d7b833fb1d6f5087840d2f545584fcbb13351c1e889177a18f38c4e0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•3 views

Malicious code in laila-bakso53-sluey (npm)

Source: amazon-inspector 17eba3ec9bba598a6cfc868334955868b4fe5a9f424a3067b9e69ea6a82e3ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•6 views

Malicious code in laila-asinan59-breki (npm)

The package laila-asinan59-breki was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•8 views

Malicious code in lagoon-rose-gpy887-project (npm)

The package lagoon-rose-gpy887-project was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•6 views

Malicious code in lagoon-zenith-emv060-project (npm)

The package lagoon-zenith-emv060-project was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•8 views

Malicious code in lagoon-moon-hmy577-project (npm)

The package lagoon-moon-hmy577-project was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•3 views

Malicious code in laila-asinan35-breki (npm)

Source: amazon-inspector 9febeea617cb049c400e7c696fd6b7c06a489c7f11452b48c797a6c53078068c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•9 views

Malicious code in lagoon-yucca-etn281-project (npm)

The package lagoon-yucca-etn281-project was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•7 views

Malicious code in lagoon-icicle-crl222-project (npm)

The package lagoon-icicle-crl222-project was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in lacerta-geckodriver-tool-private (npm)

Source: amazon-inspector 1a8ae917a5908e869976d6341f9b536915f6556c4e5f81dbad2c4dcd8bb32526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•8 views

Malicious code in lacerta-eris-altair-terser-webpack-plugin (npm)

The package lacerta-eris-altair-terser-webpack-plugin was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•6 views

Malicious code in lacerta-luna-writable-cz-conventional-changelog (npm)

Source: amazon-inspector 6400b0aa8e5a72fa1f6e1bf567ff13816518f809ec298c81675edce4e202d804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•6 views

Malicious code in lacerta-configstore-cz-conventional-changelog-janus (npm)

Source: amazon-inspector 6df0a3732e31985a11e0193d3314a95967bfe48f5cac077d7528b1c51f6e81c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in lacerta-deneb-react-bootstrap-gravity (npm)

Source: amazon-inspector 8ee4a9712b532e871f7b4ddaa054d992da7855fe931e1bc6d0a47c71aa8e651e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•6 views

Malicious code in lacerta-chalk-ini-neptune (npm)

Source: amazon-inspector 45cf21208b56ae1d0da3be8ce48b148ac7f6247e8b2ee4ddf53e45b162060b7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in lagent (npm)

The package lagent was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in ladenes (npm)

The package ladenes was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•3 views

Malicious code in lacerta-electron-taurus-triton (npm)

Source: amazon-inspector 3501f859a05328b94c7db37388565d928c8afc4f855f8c268ad98bef89a627ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•5 views

Malicious code in lacerta-html-webpack-plugin-socketio-jabbah (npm)

Source: amazon-inspector a63dbc92d7357f2dc4da01f1acf0624b6e8e6e4639bca26a33abcb901e3057f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in ladyphp (npm)

The package ladyphp was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•3 views

Malicious code in lacerta-polaris-tool-resolvers (npm)

Source: amazon-inspector 4e14658508cd2a68cf53158830bd8ec585bd27f436ddb4ef01bbd48b3cf1384b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in lacerta-mutation-lyra-loop (npm)

Source: amazon-inspector 7e1a8778a9919d1bf804f1ffc224052d3b82fa960b4e13abb3c34bc2b1c21a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in lacerta-magellan-sagitta-dotenv (npm)

Source: amazon-inspector 7daa5ca770f65cf9f926a2a05bf541b135aeca414fafdefcc3362e1a5941c1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in lacerta-vulcan-lacerta-hercules (npm)

Source: amazon-inspector 70754d37b6fe15e7022a1dd964703e0c84c878a507e041c3d5b1eb0bb87a1bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in lacerta-warp-perseus-forever (npm)

Source: amazon-inspector d114be1fc47db70d408c4ef91f54c6e59def37f58a787a130bd55786b6671395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•5 views

Malicious code in lacerta-zenobia-magellan-cluster (npm)

The package lacerta-zenobia-magellan-cluster was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•6 views

Malicious code in lacerta-mineralogy-tailwindcss-gemini (npm)

The package lacerta-mineralogy-tailwindcss-gemini was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•6 views

Malicious code in lacerta-luna-install-alphard (npm)

Source: amazon-inspector cc9485c03dc1303138bc43b8c02c33cee8c21ff4812ed6641dcb08419ce5aa61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in laduja (npm)

The package laduja was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•5 views

Malicious code in lagoon-galaxy-ipr289-project (npm)

The package lagoon-galaxy-ipr289-project was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•9 views

Malicious code in lacerta-google-superagent-elektra (npm)

Source: amazon-inspector de73d415527879643b80a8cec649f95bbaf9127f7d66d21a9a0b119d20696c3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in lacerta-middleware-procyon-exec (npm)

Source: amazon-inspector da1b28da3265a24a7bcce4680ed10ee0d5aa21f933a37897e5c22f5b5203a960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•3 views

Malicious code in ladoputi-static (npm)

Source: ossf-package-analysis 1448356c200aec8d8b1197163159b7b15288c3629fc0a3ec2d33dd82c06725ac The OpenSSF Package Analysis project identified 'ladoputi-static' @ 99.99.99 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•5 views

Malicious code in lagoon-evergreen-kwq796-project (npm)

The package lagoon-evergreen-kwq796-project was found to contain malicious code. --- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in lacerta-thuban-dynamo-loopback (npm)

Source: amazon-inspector c65ac397f9b36d38dee1f9ef9aa1169d6ff2d191616d1632ac41ab0c66a98756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•4 views

Malicious code in lacerta-hyperion-cors-sass-loader (npm)

Source: amazon-inspector 8d9832123a085550ecf3b72f0ef1e00f4cde4b0f3289e6500118e6db913e8a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/17 8:16 a.m.•5 views

Malicious code in lacerta-dotenv-parse-variables-charon-bootstrap (npm)

Source: amazon-inspector 655f0990025331f26bea8ba9a4718b3206e5931ea8fefccd766e369c6312c564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.9AI score
SaveExploits0References2Affected Software1
Total number of security vulnerabilities163873