Lucene search
+L
Github MalwareRecent

38993 matches found

GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•2 views

Malicious code in involved_walrus_z3n (npm)

Source: amazon-inspector 111b8cb5242bce332ce2b83596e8bb84de782e422d889325bbe1037ea3fa5223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•2 views

Malicious code in io-sagitta-morgan-nightwatch (npm)

Source: amazon-inspector 086f999fc627768d00c1afc5e47ec5cdc6e8a75d0c75e284604f764d0763d384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•2 views

Malicious code in io-frontend-jasmine-ursa (npm)

Source: amazon-inspector 3308e04cfe0933e6fc4337e749c10f0c0bd6ba52fd5827d1fbce22de7792638b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in io-cache-webdriverio-carina (npm)

Source: amazon-inspector 9ab5ad4ee1784e75ef77e20efddc0f5f115f497559dcceb0c977e7ebe008c054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•2 views

Malicious code in io-mutation-eslint-izar (npm)

Source: amazon-inspector 45164c7dc6e9e0aca6bece375bafb9cf7bc338835e1beb1fcffcc5c140da59c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•4 views

Malicious code in ioiwds (npm)

Source: ossf-package-analysis 494e4b2b84945fc74e1e445a920046bb23d44ae5bbedb8d1ff988a9899234272 The OpenSSF Package Analysis project identified 'ioiwds' @ 9.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. ---...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•5 views

Malicious code in io-charon-dactyl-pyxis (npm)

Source: amazon-inspector 1bb076b8a92826ac002b2ee673f2234d7610855e9af4e253a5bd890350ac07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in involved_mite-silentdev (npm)

Source: amazon-inspector 745d4d04fa7518a66dc5c97cebd1d2467cadba2c975f7cef549c34afce900390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in io-cordelia-meteor-filament (npm)

Source: amazon-inspector 37bb443e8b535dc59175b1ef8d7eb72d284f31f0b56ff72943312cddcb025736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in involved_pinniped_z3n (npm)

Source: amazon-inspector 4e5641c55d5e30dbf0bc00b874bdf40f867e0c59aa09a35a57960d536b694e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•2 views

Malicious code in involved_jaguar_0xrequest (npm)

Source: amazon-inspector eb19b81f52ef9455f4dc8d9170a49ea9dc571bd8d08f1b5b4b2ce4aa691aa521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in io-radiant-kinetic-betelgeuse (npm)

Source: amazon-inspector 6c3062fe4212f195fbdb0430f3df687e288bc65fe6c974ea700963c2c381fdce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in io-quark-babel-centaurus (npm)

Source: amazon-inspector 0d4b40a9ef6ba2338b307f6019ef8cff798ca04f067fafe984721e61b3924902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in io-restart-less-neptune (npm)

Source: amazon-inspector 02f4d0056d31b5a03779d08089412376d33984c089f20b0c1f39e54e7df1036e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•4 views

Malicious code in invisible_hippopotamus_z3n (npm)

Source: amazon-inspector 5b24c71daa1bf261cb8b18c2c3e5a13635757cd9167957e5f8e82bb0bb09f37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in involved_anteater_z3n (npm)

Source: amazon-inspector cb61d964832431e81a7d9cef8279cb43c751c6bbb50e6a1ebd0940e74ba5a54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in invisible-amethyst-newt (npm)

Source: amazon-inspector 405d88089f061c67c9d0a65893fea84a0c7a3ac17f591c82ee073543033ab301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in inul-poke4 (npm)

Source: amazon-inspector 13083d1b26e9093f3a004dd061c693a8c04c1cabc830df290c65bd0c64178ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•4 views

Malicious code in invisible_llama_dumbs (npm)

Source: amazon-inspector 001a625e9663a57c96069bc43ce5ea902fecfd1d4f986bebe2192886eeec0e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•2 views

Malicious code in involved_cicada_z3n (npm)

Source: amazon-inspector f816e04ffd2ddf67803ca69181c14282ac4e180dbec0a207c9e5528f5f95b6f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in invent-with-python-zh (npm)

The package invent-with-python-zh was found to contain malicious code. --- Credit: OpenSSF source...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in inul-poke25 (npm)

Source: amazon-inspector 3fa702424ed65d4a2d1c17bd0363e9cadea29b2a30fa42ea1d8edfbcfc0bf0e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in invisible_clownfish_z3n (npm)

Source: amazon-inspector a951f97a6ad1e2d417b128020bca25d48b9e199fb204fc599a3ee9b6c9128923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in invalid-polyfill-boolean (npm)

Source: ossf-package-analysis 494509102be194f3de6962a2ed4e22af22ecab01d9fb1c460b2cf0d93c4e6591 The OpenSSF Package Analysis project identified 'invalid-polyfill-boolean' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicio...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in invisible_crocodile_z3n (npm)

Source: amazon-inspector 4cd7296e39af32235947dfcff41417d660368719b78ef2a05bd4ce7843afe40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in invisible_crawdad_z3n (npm)

Source: amazon-inspector db3f0548f9cb52ab973b5b4de60e7fbf393932b6769d190e8b373d90ff1b5bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•5 views

Malicious code in invisible_elephant_0xrequest (npm)

Source: amazon-inspector 16c6f6ffdf46f4f4bd8d03981d367536af036cbb74473989d7de488cbd62334d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•2 views

Malicious code in invisible_gibbon_z3n (npm)

Source: amazon-inspector 59a8a72a1cf5f62ff86f7a1e4029191f73bd2b2e9d469e49142b69a94509fe99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in invisible_smelt_z3n (npm)

Source: amazon-inspector f19ddfb62eea32d27dfdad8c88192ceab6f221efa221ffb48d27d68757cf7a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in invisible_guppy_requirement (npm)

Source: amazon-inspector a5726704d304786b0ebc849afb2147b77fc37a40e0fd1f8ec166ade939b8961f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in inul-poke8 (npm)

Source: amazon-inspector 17836f53d27b300f8d078df2a2c7688d828f15c6da3c68073804cf93596cfc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in invisible_dragonfly_z3n (npm)

Source: amazon-inspector 95b4e370f30ddd237967132addd1d525180b56c8136cb67fceb30277925b8957 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•4 views

Malicious code in invisible_armadillo_dumbs (npm)

Source: amazon-inspector 67dc04f8cafb22b4cc3d1d2b315b22ad6fb1f3d291cce43026a483c2ea4dd113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•5 views

Malicious code in invisible_mongoose_z3n (npm)

Source: amazon-inspector 4f4fd153a6860643888f006855815aae91544e9f4cfa74d845b3e75dd60809d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•4 views

Malicious code in invalid-polyfill-boundary (npm)

Source: ossf-package-analysis 0fbf998b1c11f6a785806e2ab4f0bbbc4da9a95e803f643a497d41215484a11d The OpenSSF Package Analysis project identified 'invalid-polyfill-boundary' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in involved_gorilla_z3n (npm)

Source: amazon-inspector 993564abfa6cb1d75e589ce34a104261d5080c307d9961c117cfa0f854c45be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•7 views

Malicious code in involved_bison_z3n (npm)

Source: amazon-inspector 578e27ae5ce775c2e6c2c415869dc59e69ccce3a61f83981e9202b3dbc4f0adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•2 views

Malicious code in involved-peach-heron (npm)

Source: amazon-inspector 771761e6cee13d31f0f84b36fb192b4eab23a74c6d27f1e764ee257debcbc20f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in invenio (npm)

The package invenio was found to contain malicious code. --- Credit: OpenSSF source...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•2 views

Malicious code in invisible_tick_z3n (npm)

Source: amazon-inspector 663fd772a20667401b2029016fd5be4781ed64fbcca12847d3458ef23937980d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•4 views

Malicious code in invoiceserv (npm)

The package invoiceserv was found to contain malicious code. --- Credit: OpenSSF source...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in inul-poke9 (npm)

Source: amazon-inspector b475bd43ff1dfdedd4e499274f298d1ac473554f2bfb02e575018bd5d3fc4479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in invalid-polyfill-missing (npm)

Source: ossf-package-analysis 295b859cd3be40684c8d7ebb9bc2a3ca4bb969aad8ff1d524948397a3724c444 The OpenSSF Package Analysis project identified 'invalid-polyfill-missing' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicio...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•2 views

Malicious code in inventory-models (npm)

The package inventory-models was found to contain malicious code. --- Credit: OpenSSF source...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•4 views

Malicious code in invoicepy (npm)

The package invoicepy was found to contain malicious code. --- Credit: OpenSSF source...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•2 views

Malicious code in involved_elephant_z3n (npm)

Source: amazon-inspector 41df91c0f01028b9aa9e643fc05952699ea7c92d2aee74b8f340b6746905be8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in invisible-red-leopard (npm)

--- Credit: OpenSSF source...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•4 views

Malicious code in invalid-dependency (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•2 views

Malicious code in invoicingserv (npm)

The package invoicingserv was found to contain malicious code. --- Credit: OpenSSF source...

5.7AI score
SaveExploits0References2
GitHub Malware Advisories
GitHub Malware Advisories
•added 2026/09/13 8:14 p.m.•3 views

Malicious code in invisible_booby_z3n (npm)

Source: amazon-inspector 11935d793f932346610a862f3ef3f73d08750ae296ed596da18e07910615a0ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

5.7AI score
SaveExploits0References2
Total number of security vulnerabilities38993