14949 matches found
Malicious code in capella-axios-build-ophiuchus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de1782855692574879b52f874525f81e799648d8226dcd053e2552dc17fcfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114663
Malicious code in dactyl-lint-staged-achernar-build npm...
MAL-2025-140181 Malicious code in build-altair-winston-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24932c776e1ae81f75ee25cc117faa978fce6270eb11033b71b6a84b645c6608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115592
Malicious code in celeste-nebula-less-loader-build npm...
EUVD-2025-115842
Malicious code in cache-build-commitlint-leda npm...
MAL-2025-142699 Malicious code in frontend-build-css-loader-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f3b812757c3e29f823e8d9b9e8e9f4a5b40ec2173f90d8a330a1d86980db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-147996 Malicious code in slides-slides-build-yonder (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18801354375226d4226112eec2d62c8dadc9530120fa7e6ecfc8a365612fc872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121552
Malicious code in superagent-build-spinner-miranda npm...
EUVD-2025-115727
Malicious code in capella-axios-build-ophiuchus npm...
MAL-2025-144095 Malicious code in karma-build-sass-loader-kastra (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a1706c5747b57ad2a3fafbe469c5561cf6c547799ef10865bda8f35e773b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-120288
Malicious code in xenon-build-server-forever npm...
EUVD-2025-116517
Malicious code in ariel-docusaurus-build-postcss npm...
EUVD-2025-115910
Malicious code in build-triton-webpack-wezen npm...
EUVD-2025-112519
Malicious code in ini-middleware-build-xo npm...
EUVD-2025-112840
Malicious code in hercules-betelgeuse-build-release-it npm...
EUVD-2025-115909
Malicious code in build-unuk-uglify-js-configstore npm...
EUVD-2025-112443
Malicious code in install-build-readable-gacrux npm...
EUVD-2025-123639
Malicious code in playwright-library-build-yaml npm...