179 matches found
Malicious code in canopus-proxima-yaml-puppeteer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab40b667df69aafddc22f108f2d07a25f78edad369a93fe46cb65cacb2f989a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115747
Malicious code in canopus-hermes-postcss-loader-xanthus npm...
Malicious code in package-canopus-cluster-grus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4926128f2e014bb66395c799c67566e984d3d4bc91e3d641df6ac88d39156e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123175
Malicious code in proxima-transport-pulsar-canopus npm...
Malicious code in csrf-blitz-canopus-farout (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ea798bd71576c5ed538e260d2e37cbe0d15a5ca6bc0c477fe465085fef3f82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115731
Malicious code in canopus-vortex-fornax-warp npm...
EUVD-2025-121328
Malicious code in testcafe-promise-eslint-plugin-canopus npm...
EUVD-2025-122477
Malicious code in rimraf-canopus-promise-janus npm...
EUVD-2025-115743
Malicious code in canopus-leda-postgres-cassini npm...
EUVD-2025-116930
Malicious code in acamar-dagda-canopus-xanthus npm...
EUVD-2025-115047
Malicious code in configstore-repository-terser-canopus npm...
EUVD-2025-122382
Malicious code in run-script-changelog-publish-canopus npm...
Malicious code in canopus-hermes-postcss-loader-xanthus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in repository-canopus-csrf-stop (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57df37eeb7e187b75a267e5bee180848261635a3aa7cba4cddb584697124456d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116182
Malicious code in barnard-warp-auth0-canopus npm...
EUVD-2025-123048
Malicious code in pyxis-cypress-chromedriver-canopus npm...
EUVD-2025-121904
Malicious code in soap-hermes-farout-canopus npm...
EUVD-2025-115749
Malicious code in canopus-ceres-start-blaze npm...