232 matches found
EUVD-2025-177323
Malicious code in parcel-paleontology-configstore-sails npm...
EUVD-2025-176051
Malicious code in taurus-configstore-delphinus-nightmare npm...
MAL-2025-186265 Malicious code in concurrently-configstore-lyra-perseus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdd3e3fbd31161db4d4c071bc50e19eb1af1064e748a5e2f0131d7ff033d0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175392
Malicious code in zooarchaeology-configstore-google-darkenergy npm...
EUVD-2025-180375
Malicious code in aquarius-configstore-eclipse-celeste npm...
EUVD-2025-176453
Malicious code in seismology-configstore-vuepress-global npm...
EUVD-2025-179446
Malicious code in cybernetics-configstore-apex-luna npm...
EUVD-2025-178457
Malicious code in ignite-configstore-morgan-kastra npm...
EUVD-2025-179598
Malicious code in configstore-hermes-development-update npm...
MAL-2025-186284 Malicious code in configstore-hermes-development-update (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c72cb9e0e5232a15d010e7bf17d17b4c82720aac90a7409eb49f7ec9eefc238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113400
Malicious code in frontend-nuxtjs-configstore-middleware npm...
EUVD-2025-122347
Malicious code in sadr-query-phoenix-configstore npm...
EUVD-2025-111850
Malicious code in leda-configstore-fornax-mui npm...
EUVD-2025-124699
Malicious code in mutation-configstore-fetch-polaris npm...
EUVD-2025-112187
Malicious code in jest-hermes-configstore-supervisor npm...
EUVD-2025-113104
Malicious code in graphql-registry-sedna-configstore npm...
EUVD-2025-116187
Malicious code in barnard-nova-sass-loader-configstore npm...
Malicious code in yildun-configstore-fetch-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...