114 matches found
EUVD-2025-75244
Malicious code in wanderingbonobo-appteadev npm...
EUVD-2025-77546
Malicious code in possiblebonobocrimson-50 npm...
EUVD-2025-77778
Malicious code in alonebonoboz3n npm...
EUVD-2025-78899
Malicious code in likebonoboz3n npm...
EUVD-2025-78455
Malicious code in reluctantbonoboz3n npm...
MAL-2025-99363 Malicious code in alone_bonobo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59b844f94fb2cef112a46818136d7b9e6cddaa30e2794ccfae5719e305b1bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in like_bonobo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3a4d7620e2971b687a7ebbf4bad24b5c7755fa15b49b2e4b080e10c891666d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in panicky_bonobo_dumbs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7623bdbcb2948512239146e32edccc1a96d0b813207da0722b1c93d988fa1dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-80993
Malicious code in panickybonobodumbs npm...
EUVD-2025-80397
Malicious code in subjectivebonobo0xrequest npm...
EUVD-2025-81294
Malicious code in marginalbonobo0xrequest npm...
EUVD-2025-68523
Malicious code in potentialbonoboz3n npm...
Malicious code in grotesque_bonobo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99882542da1cd8a7d96553f812b72e7ed53b592f2ecfb23b7d50597db70c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fatal_bonobo_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b45c7560ead4ae1b2f44dadd3cac424c08d6fac8f16ee6480ffa58bcdf31a24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-70146
Malicious code in grotesquebonoboz3n npm...
EUVD-2025-70421
Malicious code in favouritebonoboz3n npm...
EUVD-2025-62691
Malicious code in patientbonoboz3n npm...
EUVD-2025-63383
Malicious code in kindbonoboz3n npm...