62177 matches found
Malicious code in corvus-javascript-charon-semantic-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3ec6da952c946bcdb511cd68067f74a208ceba883ec29ce8802e9ca8e1554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-185464 Malicious code in antares-cluster-ursa-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d84a4b00a7033fc3fa3800a11c657e0a534a6b461ccf0deda2a4f531f6b3468 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175851
Malicious code in uglify-js-gatsby-mocha-titan npm...
EUVD-2025-179899
Malicious code in callback-xanthus-astrochemistry-quantum-computing npm...
EUVD-2025-176627
Malicious code in rimraf-quantum-csv-javascript npm...
Malicious code in postcss-loader-prosthetics-loopback-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f9f63b6e2e1816f62d699a65d1f5b8c88dc6d76c09ded78c5dca4dcc42d958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179558
Malicious code in corvus-javascript-charon-semantic-ui npm...
EUVD-2025-177557
Malicious code in nodejs-csrf-sagitta-materialize npm...
EUVD-2025-179012
Malicious code in europa-lynx-janus-repository npm...
EUVD-2025-176302
Malicious code in socket-table-grid-sigma-deserialize npm...
EUVD-2025-178581
Malicious code in heka-bootstrap-javascript-loopback npm...
EUVD-2025-176165
Malicious code in subduction-middleware-javascript-supernova npm...
EUVD-2025-178286
Malicious code in javascript-async-enceladus-eslint-plugin npm...
EUVD-2025-175423
Malicious code in zenobia-nightwatch-rigel-javascript npm...
MAL-2025-186716 Malicious code in element-ui-nodejs-bellatrix-hapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0756d6fd922c626edc59579a4d716f23cd964716bb8b7d01a1c54534ab451d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178361
Malicious code in io-gulp-apollo-javascript npm...
EUVD-2025-178282
Malicious code in javascript-start-halley-eclipse npm...
EUVD-2025-178281
Malicious code in jekyll-deneb-uglify-js-paleobotany npm...