13195 matches found
MAL-2025-186253 Malicious code in commitlint-config-angular-sadr-cluster-mira (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a368a0670a1239eb372db7a1d0764026369adcca6b15380695639d0c6b5379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175571
Malicious code in weywot-tool-eslint-config-dotenv npm...
EUVD-2025-175831
Malicious code in umbriel-eslint-config-kardashevscale-jwt npm...
EUVD-2025-178467
Malicious code in hyperion-postgres-eslint-config-warp npm...
EUVD-2025-176581
Malicious code in run-script-yaml-fomalhaut-eslint-config npm...
EUVD-2025-178148
Malicious code in leda-jsonp-dependencies-eslint-config npm...
EUVD-2025-179609
Malicious code in config-cross-env-nova-bunyan npm...
EUVD-2025-178519
Malicious code in hologram-oscillation-config-nestjs npm...
Malicious code in supervisor-config-hapi-relay (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3204291ed7b322002b6447d22612949989d91607e7eab0d2045e2f8adc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178531
Malicious code in hexo-commitlint-config-angular-nuxtjs-neptune npm...
EUVD-2025-178550
Malicious code in hercules-config-juno-void npm...
EUVD-2025-177383
Malicious code in paleobotany-commitlint-config-angular-ultra-nebula npm...
EUVD-2025-177605
Malicious code in nightmare-semantic-ui-init-config npm...
EUVD-2025-176368
Malicious code in singularity-bunyan-eslint-config-publish npm...
EUVD-2025-179607
Malicious code in config-darkenergy-heliophysics-quark npm...
EUVD-2025-179630
Malicious code in commitlint-config-angular-nodejs-carpo-vortex npm...
EUVD-2025-176844
Malicious code in quasar-helmet-metabolomics-node-config npm...
EUVD-2025-179604
Malicious code in config-ophiuchus-levels-version npm...
Malicious code in parsec-oauth-jsonp-eslint-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e65d8b51f1ca029d90bb2f910e5f3d92bdc1573cc4f996ae4858417ff3dfd2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...