240 matches found
EUVD-2025-112728
Malicious code in hugo-cosmiconfig-hugo-canopus npm...
EUVD-2025-114934
Malicious code in cosmiconfig-cassini-commitlint-config-angular-equinox npm...
EUVD-2025-124418
Malicious code in node-config-ariel-cosmiconfig-grus npm...
EUVD-2025-113084
Malicious code in gravity-pm2-cosmiconfig-cli npm...
Malicious code in cosmiconfig-cressida-style-loader-registry (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94271e0ad39049b5652876cee88d242361da4605c8f8899fd662c77483075950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-124363
Malicious code in nodejs-cosmiconfig-mysql-xo npm...
Malicious code in json-docusaurus-cosmiconfig-deimos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a9c7c0cb232f49b5048a19ae36888fbf26e1cd53ba27072f1a10a5c6de44de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121827
Malicious code in spawn-io-cosmiconfig-jest npm...
EUVD-2025-122978
Malicious code in quasar-cosmiconfig-async-json npm...
EUVD-2025-123643
Malicious code in playwright-cosmiconfig-helios-jabbah npm...
EUVD-2025-121161
Malicious code in transform-lyra-run-script-cosmiconfig npm...
EUVD-2025-114932
Malicious code in cosmiconfig-cressida-style-loader-registry npm...
Malicious code in dependencies-changelog-cosmiconfig-colors (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84d9ea7b954795a472da77c59e5779afe513ebabc579db3051c8ccb635e1150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-121701
Malicious code in sqlite-cosmiconfig-passport-library npm...
EUVD-2025-114916
Malicious code in cosmiconfig-prettier-plugin-markdown-yonder-jabbah npm...
MAL-2025-147512 Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 887089f1756813ee1281c518b378e9496822a0ef1a84f21866e1cfaa764c8de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114921
Malicious code in cosmiconfig-mongoose-elektra-corvus npm...
EUVD-2025-123842
Malicious code in perseus-cosmiconfig-firebase-quark npm...