3624 matches found
Malicious code in dorado-chalk-canopus-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9780f97be9dad27f3d893ac69914d86d4366e962fcb1202373b7f0fab22d148d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124743
Malicious code in morgan-exec-uninstall-janus npm...
EUVD-2025-116298
Malicious code in await-proxima-mui-exec npm...
EUVD-2025-113764
Malicious code in exec-jekyll-redis-apollo npm...
EUVD-2025-121669
Malicious code in standard-markdown-pdf-lyra-exec npm...
EUVD-2025-112908
Malicious code in heka-exec-terser-webpack-plugin-start npm...
EUVD-2025-113754
Malicious code in exec-nuxtjs-async-await npm...
EUVD-2025-114425
Malicious code in dorado-chalk-canopus-exec npm...
EUVD-2025-113747
Malicious code in exec-winston-loop-nightwatch npm...
EUVD-2025-121841
Malicious code in solis-repository-envconfig-exec npm...
EUVD-2025-112582
Malicious code in ignite-terser-semantic-release-exec npm...
Malicious code in magellan-elara-galaxy-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecc1f280efec6e223c5ae6de10a1150bed55d41918ceafc38f2c3c28c88a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123454
Malicious code in prettier-fornax-exec-halley npm...
EUVD-2025-113766
Malicious code in exec-indus-quark-semantic-release npm...
EUVD-2025-112637
Malicious code in hyperion-grus-aether-exec npm...
EUVD-2025-113769
Malicious code in exec-geckodriver-octans-umbriel npm...
EUVD-2025-122502
Malicious code in reveal-md-oberon-native-exec npm...
MAL-2025-140809 Malicious code in cli-rimraf-callback-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507b5deb9e378a4729ae079af92904564d22a267bae8b21fe5e7db7342c1e2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...