3653 matches found
EUVD-2025-114457
Malicious code in dione-tool-exec-achernar npm...
EUVD-2025-113762
Malicious code in exec-koa-andromeda-google npm...
EUVD-2025-113770
Malicious code in exec-fusion-backend-corvus npm...
EUVD-2025-120976
Malicious code in uninstall-axios-node-sass-exec npm...
EUVD-2025-115972
Malicious code in browserify-meteor-exec-jsonp npm...
EUVD-2025-116123
Malicious code in betelgeuse-exec-update-magellan npm...
EUVD-2025-112972
Malicious code in halley-exec-cordelia-polaris npm...
EUVD-2025-123431
Malicious code in prettier-plugin-markdown-procyon-non-blocking-exec npm...
EUVD-2025-121356
Malicious code in test-exec-terser-figures npm...
MAL-2025-148161 Malicious code in spica-eris-spica-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113749
Malicious code in exec-scorpius-toml-transform npm...
EUVD-2025-113759
Malicious code in exec-materialize-airbnb-dagda npm...
MAL-2025-140990 Malicious code in commitlint-jovian-exec-figures (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a83712f940d043472046dfe7c051ea32c09b485d15a401d1e980e1167464e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113760
Malicious code in exec-markdown-pdf-lyra-postgres npm...
EUVD-2025-115125
Malicious code in commitlint-exec-webdriver-manager-ini npm...
MAL-2025-144247 Malicious code in lacerta-middleware-procyon-exec (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b28da3265a24a7bcce4680ed10ee0d5aa21f933a37897e5c22f5b5203a960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-141842 Malicious code in dynamo-venus-exec-publish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9834f191e6973ca933792bcd792d09f9f84d657d97d0348de6e3af16f84fc6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-122555
Malicious code in rest-sqlite-exec-hugo npm...