407 matches found
EUVD-2025-111353
Malicious code in mdx-comet-vortex-karma npm...
EUVD-2025-115223
Malicious code in comet-parcel-perseus-postcss-loader npm...
EUVD-2025-121688
Malicious code in sqlite-release-it-markdown-pdf-comet npm...
EUVD-2025-120387
Malicious code in wolf-comet-fetch-aether npm...
EUVD-2025-115215
Malicious code in comet-tethys-phoebe-canopus npm...
EUVD-2025-113362
Malicious code in fusion-xerxes-comet-auth npm...
EUVD-2025-115221
Malicious code in comet-procyon-terser-terser-webpack-plugin npm...
EUVD-2025-123340
Malicious code in procyon-chakra-ui-comet-init npm...
EUVD-2025-120931
Malicious code in update-kinetic-comet-chariklo npm...
EUVD-2025-120974
Malicious code in uninstall-comet-orbit-oauth npm...
EUVD-2025-113329
Malicious code in gacrux-style-loader-cache-comet npm...
EUVD-2025-115237
Malicious code in comet-config-pyxis-blitz npm...
EUVD-2025-121088
Malicious code in typeorm-comet-carpo-foundation npm...
EUVD-2025-115227
Malicious code in comet-mira-lyra-prettier-stylelint npm...
Malicious code in comet-vulcan-mdx-pino (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f65149a14d2b9622e50849679ec66950763e1cd38846e1c80e2e13fae21197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in comet-mira-lyra-prettier-stylelint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9a1aeeac3691d5a766fdca3a7307d890a9cf2c5a2f47a2dee1a19284483fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114619
Malicious code in deimos-comet-ganymede-native npm...
Malicious code in xanadu-comet-nodejs-fornax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c8b88537d70aec0a919a25e1ff2865a738eec203cf17419753dbc477806aee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in deimos-comet-ganymede-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef3a69785ee560c1abd0a6e38107477d33b1462d52e8de5ad903da881e50f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...