4201 matches found
MAL-2025-146419 Malicious code in postcss-procyon-xanadu-run-script (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88030c79380d58aef26fdf412d1babc87d4120c4d6920877f4d389f9dc50bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-112556
Malicious code in indus-auth-run-script-capella npm...
EUVD-2025-111618
Malicious code in local-run-script-ophiuchus-global npm...
EUVD-2025-124368
Malicious code in node-sass-run-script-chariklo-uninstall npm...
EUVD-2025-111772
Malicious code in less-non-blocking-run-script-xanthus npm...
EUVD-2025-122374
Malicious code in run-script-mysql-antd-csv npm...
EUVD-2025-120568
Malicious code in webdriver-mocha-run-script-kastra-dactyl npm...
EUVD-2025-121263
Malicious code in thuban-run-script-phoebe-phoebe npm...
EUVD-2025-120503
Malicious code in websockets-run-script-websockets-mira npm...
Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116099
Malicious code in betelgeuse-run-script-remark-halley npm...
EUVD-2025-120242
Malicious code in xenos-run-script-weywot-exec npm...
EUVD-2025-115792
Malicious code in callback-run-script-html-webpack-plugin-server npm...
EUVD-2025-121264
Malicious code in thuban-run-script-callback-meteor npm...
Malicious code in callback-run-script-html-webpack-plugin-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a3cc4cd04277d76318a794fe020a7ea9edc9d4d5148a26b7f40fcbf27f72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121687
Malicious code in sqlite-run-script-transform-cordelia npm...
Malicious code in xanadu-run-script-ceres-loopback (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73720185a49ac547966c6348249905b0f45dbf95e66130c616a4d286437636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in sails-cosmos-run-script-envconfig (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4dcef092d4e4e3992f67dde330353e4a21f4715c8c58e5e8e6fee3efcb84f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...