62204 matches found
MAL-2025-149501 Malicious code in winston-javascript-fork-pino (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31d8ef523f64895d99cdf3b37549e07b7ff03de07b73488c2b778f8569fd1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148880 Malicious code in uglify-js-quito-ursa-fomalhaut (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaadc495679e60a19ec8445196bd4b7acb163dfea8b86c1a624c45ecead0fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115005
Malicious code in cordelia-mutation-halley-uglify-js npm...
EUVD-2025-121027
Malicious code in ultra-nightwatch-commitizen-javascript npm...
EUVD-2025-121427
Malicious code in telesto-release-it-google-javascript npm...
EUVD-2025-123553
Malicious code in polaris-slides-javascript-sagitta npm...
EUVD-2025-114180
Malicious code in electron-rimraf-orbit-javascript npm...
EUVD-2025-123773
Malicious code in phoebe-dactyl-hydra-uglify-js npm...
Malicious code in library-chai-carina-nuxtjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf871770e94c007e352f573d44b0c9597e55491ca57363731adcfa816c01b711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123786
Malicious code in phenomic-javascript-remark-csv npm...
EUVD-2025-121832
Malicious code in spawn-apollo-envconfig-jabbah npm...
EUVD-2025-122909
Malicious code in radiant-development-eslint-plugin-nodejs npm...
EUVD-2025-112170
Malicious code in jovian-csrf-javascript-gridsome npm...
EUVD-2025-114005
Malicious code in epimetheus-regulus-sass-loader-uglify-js npm...
EUVD-2025-112237
Malicious code in javascript-await-upgrade-venus npm...
EUVD-2025-122050
Malicious code in sequelize-nashira-rigel-uglify-js npm...
EUVD-2025-113390
Malicious code in fusion-arcturus-uglify-js-meissa npm...
EUVD-2025-113809
Malicious code in europa-xanadu-equinox-flare npm...
Malicious code in parcel-scorpius-mdx-umbriel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc7a21c4963dc60ce68de9cc69056a821e1b943c03d0a1cda2e6c27e06d667d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...