4201 matches found
EUVD-2025-111982
Malicious code in kastra-run-script-firebase-blaze npm...
EUVD-2025-114043
Malicious code in enif-xanthus-spinner-run-script npm...
EUVD-2025-116712
Malicious code in antares-antares-run-script-triton npm...
EUVD-2025-122370
Malicious code in run-script-testcafe-astro-ursa npm...
EUVD-2025-116316
Malicious code in avior-solis-grus-run-script npm...
Malicious code in run-script-ophiuchus-cors-neptune (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a09fd213361677312c1ca5e7462ebe175bcc01115ff87099c130dd7a70fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112454
Malicious code in inquirer-remark-upgrade-run-script npm...
MAL-2025-141364 Malicious code in cygnus-cache-magellan-run-script (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871df337f77dbbb8e35ff5cf417b96faddccf076a47434e71e0ee1943d2ab16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123931
Malicious code in pavo-antares-run-script-lyra npm...
EUVD-2025-121161
Malicious code in transform-lyra-run-script-cosmiconfig npm...
Malicious code in dynamo-run-script-nashira-markdownlint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7361ddf24b24372d3f7d805c9eb58615f9f41cd1281ea692b6ebc64d1b3c543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in got-run-script-proxima-await (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa04a34a8e56c5c772f14564f419592876e974653aa8279f0dfc3c83c0256b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in run-script-nconf-hermes-commitizen (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50ef6b1061299d5a40c1afa8a79be5c0c34df15a6f6cb207fc51e33fec9000cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124475
Malicious code in nightmare-run-script-cosmiconfig-non-blocking npm...
EUVD-2025-121596
Malicious code in stream-run-script-got-morgan npm...
EUVD-2025-122739
Malicious code in rehype-run-script-soap-process npm...
EUVD-2025-111251
Malicious code in mensa-run-script-got-lyra npm...